Could not perform action collect in AWS due to SCP restrictions over region use.

[mcruz-gh]

Description

When performing the account onboarding through the site "app.fix.security", the following error occurs:

"Error: could not perform action collect. Reason: Unhandled exception in AWS Plugin: An error occurred (UnauthorizedOperation) when calling the DescribeRegions operation: You are not authorized to perform this operation. User: arn:aws:iam::639605712835:user/fixbackend is not authorized to perform: ec2:DescribeRegions because no identity-based policy allows the ec2:DescribeRegions action".

In this case, this is an individual account that is part of an organization which has multiple region usage blocked via SCP.

Version

SaaS

Environment

No response

Steps to Reproduce

No response

Logs

No response

Additional Context

No response