AssumeRole doesn't seem to be working as expected while using c7n-org about cloud-custodian

[kapilt]

if you run with --debug and just on that account, you should get a full traceback / pdb which would be helpful to understand why/where.

[acutis-expeditus]

Ok, will try that and update here

[acutis-expeditus]

Tried with debug

Command used
c7n-org run -c accounts.yml -s output -u policy.yml --debug run

Get the same error message, nothing much beyond that

[kapilt]

that typically means the role your executing the cli with doesn't have permission to assume the role in the target account, per the trust document on the role.