This error usually indicates an issue with the trust policy associated with the
DatadogAWSIntegrationRole. Most of the times, this issue is caused by the role delegation process (steps 2. through 7. of http://docs.datadoghq.com/integrations/aws/#installation).
Please check the following points for the AWS account mentioned in the error.
- Are you using in the Datadog AWS integration the exact role name you created in AWS? Extra spaces/characters on the AWS side or the Datadog side will make the role delegation fail.
- Did you enter Datadog's account ID 464622532012? Some customers used their own AWS account ID in the past which causes the integration to fail.
- Have you required MFA? Our integration cannot work in that case.
- Try regenerating the AWS External ID and re-entering it in the AWS trust policy. Ensure you press update configuration when doing this step:
Example of trust policy in AWS:
If that doesn't solve the issue, please try going through the integration steps again focusing on steps 2-7 of http://docs.datadoghq.com/integrations/aws/#installation.
If you're still running into this error please contact support with a screenshot or attachment of your policy to troubleshoot further.