Cloud & Infrastructure
Bug Report
Terraform AccessDenied in a new AWS region: Control Tower Region deny SCP explained
Our first Terraform apply in ap-southeast-3 failed with an explicit deny even though the role had AdministratorAccess. The cause was the Control Tower Region deny control. Here is how we proved it, enabled the region the supported way, and redesigned region governance in our landing zone.