aws-samples / vpc-multi-tier Goto Github PK

When you attempt to use this template with the same VPC name in a second region within the same AWS account, the template will fail due to an IAM role having already been created. The IAM role created by this template allows VPC flow logs to create and put logs to a CloudWatch logs group

As a workaround, you can set the VPC name to a unique value within your account (for example. by including the region identifier in the name). By doing so, the IAM role name will include the region identifier and be unique across your regions.

An alternative approach that is to move the IAM role creation from this template to another template that addresses global AWS resources. This approach would result in a single IAM role vs a role per region and per VPC.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc.html#aws-resource-ec2-vpc-properties