Refresh member accounts fails with 'Failed running "Amazon AWS Organizations" pattern. Please check Pattern Log for more information'

Go to solution
Stuart26
Tera Contributor

‎10-30-2019 10:23 AM

Hi,

I've just built a new mid server in our AWS cloud and tried to discover cloud. When I click on Refresh Member Accounts I get this error:

The pattern log looks like this:

The pattern log text is below. I've verified that the IAM credentials I have work using AWS Powershell on the mid server (AWS powershell also returns data from the get-accountlist command). Any help identifying why the mid server is returning an error would be appreciated.

{
  "name" : "Discovery Log",
  "status" : "FAILURE",
  "children" : [ {
    "name" : "Pre Pattern Execution",
    "id" : "pre_pattern_execution_script",
    "status" : "SUCCESS",
    "level" : 2,
    "messages" : [ {
      "message" : "2019-10-30 17:09:01: Getting pre pattern execution data generated by script."
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(serviceAccountId,<<REDACTED>>)",
      "severity" : "DEBUG"
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(credentialSysId,<<REDACTED>>)",
      "severity" : "DEBUG"
    }, {
      "message" : "2019-10-30 17:09:01: Getting pre pattern execution data generated by script."
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(serviceAccountId,<<REDACTED>>)",
      "severity" : "DEBUG"
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(credentialSysId,<<REDACTED>>)",
      "severity" : "DEBUG"
    } ],
    "type" : "NONE"
  }, {
    "name" : "Selecting Pattern for Execution",
    "id" : "set_pattern_name",
    "status" : "SUCCESS",
    "level" : 2,
    "messages" : [ {
      "message" : "2019-10-30 17:09:01: Pattern: Amazon AWS Organizations"
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(pattern,Amazon AWS Organizations)",
      "severity" : "DEBUG"
    }, {
      "message" : "2019-10-30 17:09:01: Pattern: Amazon AWS Organizations"
    }, {
      "message" : "2019-10-30 17:09:01: setAttribute(pattern,Amazon AWS Organizations)",
      "severity" : "DEBUG"
    } ],
    "type" : "NONE"
  }, {
    "name" : "Identification for Organizations",
    "status" : "GRACEFUL_TERMINATION",
    "children" : [ {
      "name" : "Get discovery type",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2019-10-30 17:09:01: setAttribute(hd_or_td,horizontal)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(hd_or_td,horizontal)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(service_account,[{discovery_credentials=<<REDACTED>>}])",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(headers,X-Amz-Target:AWSOrganizationsV20161128.DescribeOrganization,Content-Type:application/x-amz-json-1.1,Accept:application/json)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(method,POST)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(formatted,false)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(body,{})",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(url,https://organizations.us-east-1.amazonaws.com/)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:04: Execution time: 3188 ms",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:04: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Match HD is running",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Create Service Account table",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2019-10-30 17:09:01: setAttribute(service_account,[{discovery_credentials=<<REDACTED>>}])",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Get Master Account ID",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2019-10-30 17:09:01: setAttribute(headers,X-Amz-Target:AWSOrganizationsV20161128.DescribeOrganization,Content-Type:application/x-amz-json-1.1,Accept:application/json)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(method,POST)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(formatted,false)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(body,{})",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:01: setAttribute(url,https://organizations.us-east-1.amazonaws.com/)",
        "severity" : "DEBUG"
      }, {
        "message" : "2019-10-30 17:09:04: Execution time: 3188 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Match master account",
      "status" : "GRACEFUL_TERMINATION",
      "level" : 3,
      "messages" : [ {
        "message" : "2019-10-30 17:09:04: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    } ],
    "level" : 2,
    "type" : "IDENTIFICATION_SECTION_TYPE"
  } ],
  "level" : 0,
  "messages" : [ {
    "message" : "2019-10-30 17:09:01: Task is running on MID server <<REDACTED>>",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: Task is running on MID server <<REDACTED>>",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  }, {
    "message" : "2019-10-30 17:09:01: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
  } ],
  "type" : "NONE"
}

0 Helpfuls
  • 2,944 Views
1 ACCEPTED SOLUTION

Go to solution
Stuart26
Tera Contributor

‎04-16-2020 02:06 AM

Eventually got this fixed. We where having a problem with SSL Inspection on the outbound proxies. Java didn't like the certificate chain and it wouldn't work. Turned SSL inspection off and it worked no problem.

View solution in original post

8 REPLIES 8

Go to solution
escobarrr
Kilo Contributor

‎10-30-2019 10:52 AM

Hello, I can't even open the images, could you send them again so I can understand your issue a bit better and maybe help you.

 VPN Sai Mannat AnyDesk

0 Helpfuls

Go to solution
Stuart26
Tera Contributor
In response to escobarrr

‎10-30-2019 12:41 PM

Hi escobarr - images attached.

Thanks
Stuart

Preview file
15 KB
Preview file
54 KB
0 Helpfuls

Go to solution
Stuart26
Tera Contributor

‎04-16-2020 02:06 AM

Eventually got this fixed. We where having a problem with SSL Inspection on the outbound proxies. Java didn't like the certificate chain and it wouldn't work. Turned SSL inspection off and it worked no problem.

Go to solution
Rick54
Tera Expert

‎11-19-2020 09:27 AM

Hi, I'm having the same issue but I didn't install any mid servers in the environment. I added master account and set up cloud service account then when I click on the Refresh member Accounts, I am getting same error. Could you please tell me how did you disabled SSL inspection?

0 Helpfuls