Unable to deploy Classification with Volume Encryption enabled
Applies to
- NetApp Console
- Classification
- Amazon Web Services (AWS)
Issue
An AWS Service Control Policy (SCP) enforcing EC2 Volume Encryption is preventing Classification from being deployed
Cause
The AWS Organization enforced an SCP mandating EC2 volume encryption at deployment, which NetApp Console Classification's CloudFormation process does not natively support
Solution
- Ensure that the cloudformation:ListStacks is added as an IAM permission to the Console Agent Permissions JSON
- A hotfix was released March 26th, 2026 to allow deployment with EC2 Volume Encrypytion Enabled
Partner Notes
partnerNotes_text
Additional Information
additionalInformation_text