You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
AFT Version:
(Can be found in the AFT Management Account in the SSM Parameter /aft/config/aft/version)
Terraform Version & Provider Versions
Please provide the outputs of terraform version and terraform providers from within your AFT environment
terraform version
1.13.1
terraform providers
1.9.0
Bug Description
We have a Control Tower installation in eu-south-1 region and we're trying to deploy AFT in the same region. During the terraform plan execution we're getting the following error:
│ Error: reading SSM Parameters by path (/aws/service/global-infrastructure/services/servicecatalog/regions): operation error SSM: GetParametersByPath, https response error StatusCode: 400, RequestID: a951c28c-e2cc-485f-8df7-15f37a44a770, api error AccessDeniedException: No access to "/aws/" namespace: aws/service/global-infrastructure is not a valid namespace │ │ with module.aft.data.aws_ssm_parameters_by_path.servicecatalog_regional_data[0], │ on .terraform/modules/aft/data.tf line 12, in data "aws_ssm_parameters_by_path" "servicecatalog_regional_data": │ 12: data "aws_ssm_parameters_by_path" "servicecatalog_regional_data" {
This data lookup can't be executed in Milan region since the global public parameters are not available in that region. However, there is no limitation in that region as per official Control Tower documentation (https://docs.aws.amazon.com/controltower/latest/userguide/limits.html). The expectation is to be able to install AFT also in Milan region as already done for version < 1.12.1.
To Reproduce
Install AFT with eu-south-1 as primary region
Expected behavior
I expect to complete the aft deployment in eu-south-1 region
Related Logs
│ Error: reading SSM Parameters by path (/aws/service/global-infrastructure/services/servicecatalog/regions): operation error SSM: GetParametersByPath, https response error StatusCode: 400, RequestID: a951c28c-e2cc-485f-8df7-15f37a44a770, api error AccessDeniedException: No access to "/aws/" namespace: aws/service/global-infrastructure is not a valid namespace
│
│ with module.aft.data.aws_ssm_parameters_by_path.servicecatalog_regional_data[0],
│ on .terraform/modules/aft/data.tf line 12, in data "aws_ssm_parameters_by_path" "servicecatalog_regional_data":
│ 12: data "aws_ssm_parameters_by_path" "servicecatalog_regional_data" {
The text was updated successfully, but these errors were encountered:
Terraform Version & Prov:
AFT Version:
(Can be found in the AFT Management Account in the SSM Parameter
/aft/config/aft/version
)Terraform Version & Provider Versions
Please provide the outputs of
terraform version
andterraform providers
from within your AFT environmentterraform version
terraform providers
Bug Description
We have a Control Tower installation in eu-south-1 region and we're trying to deploy AFT in the same region. During the terraform plan execution we're getting the following error:
│ Error: reading SSM Parameters by path (/aws/service/global-infrastructure/services/servicecatalog/regions): operation error SSM: GetParametersByPath, https response error StatusCode: 400, RequestID: a951c28c-e2cc-485f-8df7-15f37a44a770, api error AccessDeniedException: No access to "/aws/" namespace: aws/service/global-infrastructure is not a valid namespace │ │ with module.aft.data.aws_ssm_parameters_by_path.servicecatalog_regional_data[0], │ on .terraform/modules/aft/data.tf line 12, in data "aws_ssm_parameters_by_path" "servicecatalog_regional_data": │ 12: data "aws_ssm_parameters_by_path" "servicecatalog_regional_data" {
This data lookup can't be executed in Milan region since the global public parameters are not available in that region. However, there is no limitation in that region as per official Control Tower documentation (https://docs.aws.amazon.com/controltower/latest/userguide/limits.html). The expectation is to be able to install AFT also in Milan region as already done for version < 1.12.1.
To Reproduce
Install AFT with eu-south-1 as primary region
Expected behavior
I expect to complete the aft deployment in eu-south-1 region
Related Logs
│ Error: reading SSM Parameters by path (/aws/service/global-infrastructure/services/servicecatalog/regions): operation error SSM: GetParametersByPath, https response error StatusCode: 400, RequestID: a951c28c-e2cc-485f-8df7-15f37a44a770, api error AccessDeniedException: No access to "/aws/" namespace: aws/service/global-infrastructure is not a valid namespace
│
│ with module.aft.data.aws_ssm_parameters_by_path.servicecatalog_regional_data[0],
│ on .terraform/modules/aft/data.tf line 12, in data "aws_ssm_parameters_by_path" "servicecatalog_regional_data":
│ 12: data "aws_ssm_parameters_by_path" "servicecatalog_regional_data" {
The text was updated successfully, but these errors were encountered: