Organization Level Restriction (SCP)

Everpure Cloud Dedicated for AWS

Audience

Public

Technology Integrations

Amazon Web Services (AWS)

Source Type

Documentation

Issue	Error	Resolution
Fails to create Array S3 bucket policy	The bucket policy already exists on bucket pure-xxxxxxx-xxxxx-xxxx-xxx	The cause of this issue might be an SCP policy applied on the AWS Organization level. When the Everpure Cloud Dedicated CloudFormation creates the bucket, the Org level SCP applies a bucket restriction policy. Subsequently, when CloudFormation with account level permission attempts to apply the defined bucket policy on the template, it fails due to a bucket restriction policy has already been defined by SCP. Please contact your Account admin to give an exception for your account, or any S3 bucket with pure-* prefix to have its own restriction policy applied.

Issue

Error

Resolution

Fails to create Array S3 bucket policy

The bucket policy already exists on bucket pure-xxxxxxx-xxxxx-xxxx-xxx

The cause of this issue might be an SCP policy applied on the AWS Organization level.

When the Everpure Cloud Dedicated CloudFormation creates the bucket, the Org level SCP applies a bucket restriction policy. Subsequently, when CloudFormation with account level permission attempts to apply the defined bucket policy on the template, it fails due to a bucket restriction policy has already been defined by SCP.

Please contact your Account admin to give an exception for your account, or any S3 bucket with pure-* prefix to have its own restriction policy applied.