雲端災難回復附加元件 （CDRA） 無法部署

Summary: 當使用者是已設定服務控制原則 （SCP） 的組織成員時，雲端災難回復附加元件 （CDRA） 將無法部署。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

使用組織 SCP 設定的使用者帳戶的部署具有限制集，當 CDRA 嘗試查詢 AWS 並檢查 IAM 策略權限或角色時，可能會阻止成功設定 CDRA。

 

Cause

由於使用啟用組織 SCP 的帳戶設定的限制，部署程序會在嘗試檢查「verifyRolePriviligesForActions」時失敗，如下方記錄摘錄所示：

DEBUG [2020-07-16 18:04:33,463] [main] [CdrRole:verifyRolePrivilegesForActions:272]: verifyRolePrivilegesForActions for user DellEMC-cdr-dr-vmc-cdrs-user-01
ERROR [2020-07-16 18:04:33,605] [main] [CdrRole:verifyRolePrivilegesForActions:300]: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.
ERROR [2020-07-16 18:04:33,605] [main] [CloudManager:init:280]: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.
java.lang.RuntimeException: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.

 

Resolution

解決方法是配置 SCP 帳戶，使其不限制用於部署 CDRS 的角色。

 

Affected Products

Avamar, PowerProtect Data Protection Appliance, Cloud Disaster Recovery, PowerProtect Software
Article Properties
Article Number: 000183021
Article Type: Solution
Last Modified: 16 Oct 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.