amazon-web-services - AWS Service Catalog 使用 terraform 预置产品

Question

我目前正在尝试通过 terraform 部署 AWS Service Catalog 产品(Cloudformation 模板)。我的部署是通过另一个 BUILDER 账户承担的 IAM 角色进行的。此部署角色具有完整的管理权限。通过AWS控制台手动部署，可以部署Service Catalog产品。这是我的 terraform 模块:

resource "aws_servicecatalog_provisioned_product" "network" {
name                     = "reporting"
product_id               = "prod-mirxxxxx"
provisioning_artifact_id = "pa-mirxxxxx"

provisioning_parameters {
  key   = "AllowFrom"
  value = "0.0.0.0/0"
}

不幸的是，我在 terraform 部署过程中总是遇到错误:

module.reporting.aws_servicecatalog_provisioned_product.network: Creating...
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [10s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [20s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [30s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [40s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [50s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 
creating... [1m0s elapsed]
module.reporting.aws_servicecatalog_provisioned_product.network: Still 

Error: error provisioning Service Catalog Product: ResourceNotFoundException: No launch paths 
found for resource: prod-mirxxxxx

有谁有想法吗？不幸的是，我找不到任何解决此问题的方法。

Answer 1

我使用 AWS 命令​​行为我提供了 LaunchPath:

aws servicecatalog describe-product --id prod-xxxx --region eu-west-1
{
"ProductViewSummary": {
    "Id": "prodview-xxx",
    "ProductId": "prod-xxx",
    "Name": "AWS Control Tower Account Factory",
    "Owner": "AWS Control Tower",
    "ShortDescription": "AWS Control Tower Factory product. Provisions a new AWS Control Tower managed Account.",
    "Type": "CLOUD_FORMATION_TEMPLATE",
    "HasDefaultPath": false
},
"ProvisioningArtifacts": [
    {
        "Id": "pa-xxx",
        "Name": "AWS Control Tower Account Factory",
        "Description": "AWS Control Tower Factory product. Provisions a new AWS Control Tower managed Account.",
        "CreatedTime": "2022-02-14T12:19:51+00:00",
        "Guidance": "DEFAULT"
    }
],
"Budgets": [],
"LaunchPaths": [
    {
        "Id": "lpv2-xxx",
        "Name": "AWS Control Tower Account Factory Portfolio"
    }
]

}