Service Limit Error when deploying AWS Control Tower, Landing Zone

Question

Error Details
- "errorCode": "InvalidParametersException"
- "errorMessage": "AWS Control Tower detected '1' validation errors:Your existing service limits for this AWS account are not sufficient for AWS Control Tower to launch. For more information, contact your account manager or AWS Support.",

Notes: I've tried checking the Service Quotas, but there are no utilizations nearing the quota value.  
AWS Organizations
AWS Service Catalog
AWS IAM
AWS CloudTrail
AWS Config
AWS CloudFormation
AWS S3
AWS KMS
AWS SNS
AWS CloudWatch

SJ · Accepted Answer

Solution: **Contacted AWS Support through Account and Billing. Helped with the Service Quota issues.**

Notes: 
1. Launching of Ec2 instances did not help resolve the issue. 
2. Values displayed on Service Quotas don't reflect the actual values. It was confirmed to me by the AWS Support chart, as they help me increased quota limit. 
3. Encountered another issue when deploying Landing Zone:** "AWS Control Tower failed to set up your landing zone completely: AWS Control Tower cannot create an account because you have reached the limit on the number of accounts in your organization"**. This was also resolved via AWS Support.

Riku_Kobayashi · Answer

Hello.

Is your AWS account a new AWS account?  
In that case, launch a free tier EC2 instance, wait a few minutes, and then try setting up Control Tower again.  
If the problem persists, try opening a case with AWS Support in "Account and Billing."  
Inquiries through "Account and Billing" are free of charge.  
https://repost.aws/questions/QUNN5SjnQKTG-cXf3FlARw8A/controltower-your-existing-service-limits-for-this-aws-account-are-not-sufficient-for-aws-control-tower-to-launch#ANcY7NLwksTYqcFohog6V7Fw

Service Limit Error when deploying AWS Control Tower, Landing Zone

Add your answer

Relevant content