Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does it not create an OU automatically? #3

Closed
deepend-dev opened this issue Jul 11, 2022 · 4 comments
Closed

Does it not create an OU automatically? #3

deepend-dev opened this issue Jul 11, 2022 · 4 comments
Labels
question Further information is requested

Comments

@deepend-dev
Copy link

Describe the bug
The accelerator pipeline not able to create infrastructure OU on first run.

To Reproduce
Pipeline runs the first time

Expected behavior
Infrastructure OU is automatically created.

Please complete the following information about the solution:

  • [ x ] Version: [e.g. v1.0.1]
  • [ x ] Region: ap-south-1
  • [ x ] Was the solution modified from the version published on this repository? No
  • [ x ] If the answer to the previous question was yes, are the changes available on GitHub?
  • [ x ] Have you checked your service quotas for the sevices this solution uses? yes
  • [ x ] Were there any errors in the CloudWatch Logs? Nope

Screenshots
If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).

image
image

Additional context
Add any other context about the problem here.

@deepend-dev deepend-dev added the bug Something isn't working label Jul 11, 2022
@ninjaducloud
Copy link

I have exactly the same problem.
To fix it, I added the Infrastructure OU manually through AWS Control Tower.

However, I get another error

Screen Shot 2022-07-11 at 12 20 22 PM

Screen Shot 2022-07-11 at 12 23 46 PM

I use the default configuration files, those present in CodeCommit.
I'm using ca-central-1 rather than ap-south-1

@ninjaducloud
Copy link

@deepend-dev
If you take a look at the sample file organization-config.yaml, they say

If using AWS Control Tower, ensure that all the specified Organizational Units (OU)
have been created and enrolled as the accelerator will verify that the OU layout
matches before continuing to execute the deployment pipeline.

My comprehension is that you need to manage your OUs with Control Tower and not LZA.

@deepend-dev
Copy link
Author

deepend-dev commented Jul 12, 2022

Okay so the OU needs to be created through GUI and then added to org file ... @ninjaducloud

My concern is why the need of org file at all if we have to create OU from console. Is there anyway to automate this ?

@rgd11
Copy link
Contributor

rgd11 commented Jul 18, 2022

That is correct, when using the Landing Zone Accelerator on AWS with AWS Control Tower, you will need to ensure that the OU is added and properly enrolled with Control Tower.

The definitions within the organization configuration file allow references to the OUs that are listed, such as specifying which OUs to deploy a resource to using the deploymentTargets

@rgd11 rgd11 closed this as completed Jul 18, 2022
@rgd11 rgd11 added question Further information is requested and removed bug Something isn't working labels Jul 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

3 participants