Recently I started working on AWS Elastic disaster recovery for one of customer and i thought of testing it on windows.
When i started the installation all went successful and at the end it got failed with unexpected error, installation failed
I have added all the necessary permission to the IAM user as per the AWS blog but still it got failed.
And i started digging further to know what causing the issue and finally i figured out the issue
I went to event history in the cloud trail and was checking each and every event. I discovered the AssumeRole is not enabled on the region where i was planning to elastic disaster recovery setup (Ireland).
Further checking the event i saw a message stating the below
"errorMessage": "STS is not activated in this region for account:1234567890. Your account administrator can activate STS in this region using the IAM Console.",
So, i went to IAM Service, then clicked on account settings, scrolled a bit down and under Security Token Service (STS) there are few endpoints are inactive state in the region i was working for elastic disaster recovery (EDR). I made it active and have rerun the installer once again and it was successful.
Happy to see the instance was successfully registered in the AWS EDR console.