https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/transit-vpc-error-when-running-initializesubscriberaccount-json/m-p/218285#M355 <P>We determined the failure here was related to the account number.&nbsp; The actual account number has a 0 in front of it.&nbsp; The stored record in excel eliminated the 0 and caused the aws account number to be inaccurate.</P> Mon, 18 Jun 2018 20:35:23 GMT chrgre 2018-06-18T20:35:23Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/transit-vpc-error-when-running-initializesubscriberaccount-json/m-p/217809#M353 <DIV><FONT face="Calibri,sans-serif" size="2"><SPAN><FONT color="#444444" face="Helvetica Neue" size="2">Subscriber VPC setup – joining existing VPC as a subscriber.&nbsp; CFT fails with the below and rolls back.</FONT></SPAN></FONT></DIV><DIV><FONT face="Calibri,sans-serif" size="2"><SPAN><FONT color="#444444" face="Helvetica Neue" size="2"><BR />Invalid principal in policy: "AWS":"arn:aws:iam::19560164653:root" (Service: AmazonIdentityManagement; Status Code: 400; Error Code: MalformedPolicyDocument; Request ID: 2602a9d0-6f22-11e8-bff6-5bb0232cc1cd)</FONT></SPAN></FONT></DIV><DIV><FONT face="Calibri,sans-serif" size="2"><SPAN><FONT color="#444444" face="Helvetica Neue" size="2">&nbsp;</FONT></SPAN></FONT></DIV><DIV><FONT face="Calibri,sans-serif" size="2"><SPAN><FONT color="#444444" face="Helvetica Neue" size="2">Think it is coming from section starting on line 94 in the InitializeSubscriberAccount.json CloudFormation template.</FONT></SPAN></FONT></DIV><DIV>&nbsp;</DIV><DIV><FONT face="Calibri,sans-serif" size="2">Anyone have thoughts on this or how to resolve?</FONT></DIV><DIV>&nbsp;</DIV><DIV><FONT face="Calibri,sans-serif" size="2">Thanks.</FONT></DIV> Wed, 13 Jun 2018 21:02:01 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/transit-vpc-error-when-running-initializesubscriberaccount-json/m-p/217809#M353 chrgre 2018-06-13T21:02:01Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/transit-vpc-error-when-running-initializesubscriberaccount-json/m-p/218285#M355 <P>We determined the failure here was related to the account number.&nbsp; The actual account number has a 0 in front of it.&nbsp; The stored record in excel eliminated the 0 and caused the aws account number to be inaccurate.</P> Mon, 18 Jun 2018 20:35:23 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/transit-vpc-error-when-running-initializesubscriberaccount-json/m-p/218285#M355 chrgre 2018-06-18T20:35:23Z