Control Tower - Account Factory - No launch paths found for resource: prod-2dlxxxx

Hi, That is likely due to the Permission Set/Role you are using not being allowed to use the Account Factory Product/Portfolio in Service Catalog. https://docs.aws.amazon.com/controltower/latest/userguide/troubleshooting.html#no-launch-paths-found

Alongside the notes above, to fix the permissions you can: Go to the Service Catalog service in the AWS Console. Under Administration in the left menu, select Portfolios. You should see a "AWS Control Tower Account Factory Portfolio". Click on that name. There will be a tab "Access", select that and you will see a list of identities that have permissions to use this portfolio and products. Use the Grant Access button to add your Role to that list. Due to being logged in via SSO and Permission Sets, your role will match something like aws-reserved/sso.amazonaws.com/<region>/AWSReservedSSO_<Permission Set name>_<unique identifier>