New AWS Connection without Activegate

[kiragoriya]

Has anyone encountered issues when attempting to set up a new AWS Connection method using the “No Active Gateway” option through a CloudFormation template?

Our deployment is failing at the following stage, and we’re trying to determine the root cause.

We're getting into failed at following stage.

Resource: DynatraceLogIngestStackSet

Status: CREATE_FAILED

Error Message:
Resource handler returned message: "Resource of type 'Stack set operation [094d7702-3770] was unexpectedly stopped or failed. status reason(s): [The following resource(s) failed to create: [DynatraceFirehoseBackupS3Bucket, DynatraceFirehoseLogGroup]. Delete requested by user.]" (RequestToken: 6fa7d3b3-d0f2, HandlerErrorCode: NotStabilized)

Failed Resources:
- DynatraceFirehoseBackupS3Bucket
- DynatraceFirehoseLogGroup

[dawid_kaszubski]

Hi @kiragoriya , there might be a couple of reasons for the deployment failure.

To pinpoint the exact reason, check the "Stack instance" events for the failing region in the StackSet operation. Then, check the inner stack events for DynatraceFirehoseBackupS3Bucket/DynatraceFirehoseLogGroup. Those events will contain the specific AWS error (e.g., "Bucket name already exists," "AccessDenied," "KMS key not allowed," etc.).

[kiragoriya]

Hey @dawid_kaszubski  We've tried multiple times to review cloud trail logs and existing s3 buckets and grant high elveated access to deploy cf template still we don't get any meaningful error out 

[dawid_kaszubski]

Have you tried the da-activation-check script? 
https://docs.dynatrace.com/docs/shortlink/aws-connection-app-settings#expand--The-CloudFormation-sta...