Comments (2)
Thanks for reporting this. I am looking into this and will get back as soon as I can regarding what can be done to address this error.
from aws-securityhub-multiaccount-scripts.
The error that you are reporting is from the AWS Step Functions service. Quotas for Step functions are outlined here: https://docs.aws.amazon.com/step-functions/latest/dg/limits-overview.html, specifically it would be the "Maximum input or output size for a task, state, or execution" quota. From a few searches it looks like the solve is to alter the way that information is being passed around for the tasks in your step function. I suspect that due to the large number of accounts you are accruing a large amount of responses from AWS API calls and that is accounting for the max size exceeded.
Here are a few resources that might help:
https://ncoughlin.com/posts/aws-step-functions-notes/#statesdatalimitexceeded. - This seems like it may align well to your situation.
https://stackoverflow.com/questions/55702571/step-function-exceeding-the-maximum-number-of-characters-service-limit
https://stackoverflow.com/questions/71833184/aws-step-functions-size-exceeding-the-maximum-number-of-bytes-service-limit?noredirect=1&lq=1
Let me know if this helps or if you have additional questions. I'll do my best to help you along on this.
from aws-securityhub-multiaccount-scripts.
Related Issues (20)
- AccessDenied when calling the AssumeRole operation
- InvalidInputException HOT 2
- Invalid length for parameter StandardsSubscriptionRequests HOT 2
- AWS Foundational Security Best Practices controls HOT 2
- Error with not-opted-in regions with unspecified --enabled_regions
- Unable to run locally
- Will script support setting up master accounts only for now?
- Error Processing Account HOT 4
- It fails with incorrect error for each region not already enabled HOT 16
- CSV example needed HOT 1
- AWS Config not enabled and SNS topics creation
- Feature: Enable for all accounts in organization HOT 5
- sts:AssumeRole fails for sso user and iam account user HOT 2
- Fails and leaves the accounts in a broken state...
- Doesn't notice failures due to not waiting for config to enable
- Should this work in GovCloud?
- Getting timeout error after assuming role in check_config() part HOT 1
- AWS Foundational Security Best Practices v1.0.0 getting enabled by default HOT 3
- Disable Security Hub on a particular region
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-securityhub-multiaccount-scripts.