TF Error "The given key does not identify an element in this collection value" when deploying account baseline

[security-penguin]

I am currently going through the quick start and I have just deployed the accounts successfully via atmos workflow deploy/accounts -f accounts and I have run atmos terraform apply account-map -s core-gbl-root to build the account maps.

But when I run atmos workflow deploy/account-settings -f accounts I get the following error:

Planning failed. Terraform encountered an error while generating this plan.

╷
│ Error: Invalid index
│ 
│   on ../account-map/modules/iam-roles/main.tf line 46, in locals:
│   46:   is_root_user   = local.current_identity_account == local.account_map.full_account_map[local.root_account_name]
│     ├────────────────
│     │ local.account_map.full_account_map is object with 12 attributes
│     │ local.root_account_name is "core-root"
│ 
│ The given key does not identify an element in this collection value.

Checking the account map I see the line: root_account_account_name = "core-root" so it doesn't look like a object with attributes. What are some suggested steps to troubleshoot this?

[milldr]

I would make sure that the actual root account name is specified in account-map with var.root_account_aws_name

# stacks/catalog/account-map.yaml
components:
  terraform:
    account-map:
      vars:
        root_account_aws_name: root # <---- this is your unique name for your root account. It depends on whatever you named the account when created
        root_account_account_name: core-root # <---- this is always "core-root" with the default refarch

[milldr]

Behind the scenes, account-map will map the root_account_aws_name to root_account_account_name for the object used in every other component's providers.tf. So after correcting that value, make sure to reapply account-map and then try account-settings again

[osterman]

@security-penguin did this resolve your question?

[security-penguin]

Yes this fixed it thank you