Transit VPC error when running initializesubscriberaccount.json

[chrgre]

Subscriber VPC setup – joining existing VPC as a subscriber.  CFT fails with the below and rolls back.

Invalid principal in policy: "AWS":"arn:aws:iam::19560164653:root" (Service: AmazonIdentityManagement; Status Code: 400; Error Code: MalformedPolicyDocument; Request ID: 2602a9d0-6f22-11e8-bff6-5bb0232cc1cd)

Think it is coming from section starting on line 94 in the InitializeSubscriberAccount.json CloudFormation template.

Anyone have thoughts on this or how to resolve?

Thanks.

[chrgre · Accepted solution]

We determined the failure here was related to the account number.  The actual account number has a 0 in front of it.  The stored record in excel eliminated the 0 and caused the aws account number to be inaccurate.