You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello - We are facing challenges with onboarding an AWS account to Dome9. It seems we have a race condition due to the eventual consistency of the AWS API in creating the IAM role for Dome9 to use. The error below insinuates that the role created does not have the permissions yet. This is always confirmed to be the case with an immediate re-try of the TF plan/apply. It is always successful....... We have tried the use of depends_on unsuccessfully. It seems that the lack of timeouts in the provider and the timing of the response back from AWS is preventing this from working cleanly.
Can we implement API timeouts for the provider and/or retries according to the Hashi documentation that speaks to this issue located here??
Error: FAILED: POST, https://api.dome9.com/v2/cloudaccounts, 400, 400 Bad Request, Unable to add cloud account: Your API key is missing the permission: 'ec2:DescribeSecurityGroups'. on .terraform/modules/this.baseline_primary/modules/iam-baseline/dome9.tf line 95, in resource "dome9_cloudaccount_aws" "onboarding": 95: resource "dome9_cloudaccount_aws" "onboarding"
The text was updated successfully, but these errors were encountered:
Hello - We are facing challenges with onboarding an AWS account to Dome9. It seems we have a race condition due to the eventual consistency of the AWS API in creating the IAM role for Dome9 to use. The error below insinuates that the role created does not have the permissions yet. This is always confirmed to be the case with an immediate re-try of the TF plan/apply. It is always successful....... We have tried the use of
depends_on
unsuccessfully. It seems that the lack of timeouts in the provider and the timing of the response back from AWS is preventing this from working cleanly.Can we implement API timeouts for the provider and/or retries according to the Hashi documentation that speaks to this issue located here??
Error: FAILED: POST, https://api.dome9.com/v2/cloudaccounts, 400, 400 Bad Request, Unable to add cloud account: Your API key is missing the permission: 'ec2:DescribeSecurityGroups'. on .terraform/modules/this.baseline_primary/modules/iam-baseline/dome9.tf line 95, in resource "dome9_cloudaccount_aws" "onboarding": 95: resource "dome9_cloudaccount_aws" "onboarding"
The text was updated successfully, but these errors were encountered: