By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

getting security token included in the request is invalid error while enabling Security Lake on console

0

Hi Team, i was trying recently launched security lake, I followed the steps mentioned in the following link,

https://docs.aws.amazon.com/security-lake/latest/userguide/getting-started.html#enable-service

I am currently using this service for only one account and only one region. i have created admin IAM user and through that I am working. i have created a role "AmazonSecurityLakeMetaStoreManager" and attached policy and sts as mentioned in

https://docs.aws.amazon.com/security-lake/latest/userguide/manage-regions.html#iam-role-partitions

also i have added this role as Data lake administrator in lake formation Image showing role added as admin i am not getting what actual permission i am missing to give

image showing when trying to enable security lake

i am getting this error when i am trying to enable security lake through AWS console

Any help is appreciable.. Thanks in advance.

Topics
Security, Identity, & ComplianceAnalyticsAWS Well-Architected Framework
Tags
Security, Identity, & ComplianceAWS Identity and Access ManagementAWS Lake FormationSecurityAmazon Security Lake
Language
English
Shriw
asked a year ago551 views
1 Answer
1

It seems that this error message is invalid. I had the same issue and managed to work around the problem via CLI (CloudShell). By executing the command:

aws securitylake create-datalake --enable-all --meta-store-manager-role-arn <my_role_arn>

I got a new error message: An error occurred (ValidationException) when calling the CreateDatalake operation: Failed to validate the role provided. Role's trust policy does not contain trusted entity required.. This helped me to the problems I had with the role (I didn't have the proper trust relationships set in Role settings).

Hope that this helps!

tiitha
answered a year ago
  • Shriw
    a year ago

    Thanks for way around, i guess its due to its Beta version, they are still working on it. i have resolved it

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content