Troubleshoot Amazon VPC Transit Gateways VPC attachment creation - Amazon VPC

Troubleshoot Amazon VPC Transit Gateways VPC attachment creation

The following topic can help you troubleshoot problems that you might have when you create a VPC attachment.

Problem

The VPC attachment failed.

Cause

The cause might be one of the following:

  1. The user that is creating the VPC attachment does not have correct permissions to create service-linked role.

  2. There is a throttling issue because of too many IAM requests, for example you are using AWS CloudFormation to create permissions and roles.

  3. The account has the service-linked role, and the service-linked role has been modified.

  4. The transit gateway is not in the available state.

Solution

Depending on the cause, try the following:

  1. Verify that the user has the correct permissions to create service-linked roles. For more information, see Service-linked role permissions in the IAM User Guide. After the user has the permissions, create the VPC attachment.

  2. Create the VPC attachment manually through the console or API. For more information, see Create a VPC attachment using Amazon VPC Transit Gateways.

  3. Verify that the service-linked role has the correct permissions. For more information, see Transit gateway service-linked role.

  4. Verify that the transit gateway is in the available state. For more information, see View transit gateway information using Amazon VPC Transit Gateways.