Error while calling the deleteresourceconfig boto3 api

[sgopa]

While calling the deleteresourceconfig boto3 api through code, facing the below error but we are able to listresourceconfig using the api. Could you please us here and let us know the reason for the error?

botocore.errorfactory.ValidationException: An error occurred (ValidationException) when calling the DeleteResourceConfig operation: Value 'AWS::EC2::Instance' at 'resourceType' failed to satisfy constraint: resourceType must not have an organization name that matches any of the following 'aws', 'amazon', 'amzn', 'alexa'.

[RyanFitzSimmonsAK]

Hi @sgopa, thanks for reaching out. Could you provide debug logs of this behavior? You can get debug logs by adding boto3.set_stream_logger('') to your script, and redacting any sensitive information. Thanks!

[pnagases]

@RyanFitzSimmonsAK As suggested by you we are generated debug logs . please find the attached logs .

Logs:
2023-07-10 12:37:38,565 botocore.hooks [DEBUG] Changing event name from creating-client-class.iot-data to creating-client-class.iot-data-plane
2023-07-10 12:37:38,566 botocore.hooks [DEBUG] Changing event name from before-call.apigateway to before-call.api-gateway
2023-07-10 12:37:38,566 botocore.hooks [DEBUG] Changing event name from request-created.machinelearning.Predict to request-created.machine-learning.Predict
2023-07-10 12:37:38,567 botocore.hooks [DEBUG] Changing event name from before-parameter-build.autoscaling.CreateLaunchConfiguration to before-parameter-build.auto-scaling.CreateLaunchConfiguration
2023-07-10 12:37:38,567 botocore.hooks [DEBUG] Changing event name from before-parameter-build.route53 to before-parameter-build.route-53
2023-07-10 12:37:38,567 botocore.hooks [DEBUG] Changing event name from request-created.cloudsearchdomain.Search to request-created.cloudsearch-domain.Search
2023-07-10 12:37:38,567 botocore.hooks [DEBUG] Changing event name from docs..autoscaling.CreateLaunchConfiguration.complete-section to docs..auto-scaling.CreateLaunchConfiguration.complete-section
2023-07-10 12:37:38,568 botocore.hooks [DEBUG] Changing event name from before-parameter-build.logs.CreateExportTask to before-parameter-build.cloudwatch-logs.CreateExportTask
2023-07-10 12:37:38,568 botocore.hooks [DEBUG] Changing event name from docs..logs.CreateExportTask.complete-section to docs..cloudwatch-logs.CreateExportTask.complete-section
2023-07-10 12:37:38,568 botocore.hooks [DEBUG] Changing event name from before-parameter-build.cloudsearchdomain.Search to before-parameter-build.cloudsearch-domain.Search
2023-07-10 12:37:38,568 botocore.hooks [DEBUG] Changing event name from docs..cloudsearchdomain.Search.complete-section to docs..cloudsearch-domain.Search.complete-section
2023-07-10 12:37:38,569 botocore.utils [DEBUG] IMDS ENDPOINT: http://169.254.169.254/
2023-07-10 12:37:38,573 botocore.credentials [DEBUG] Looking for credentials via: env
2023-07-10 12:37:38,573 botocore.credentials [DEBUG] Looking for credentials via: assume-role
2023-07-10 12:37:38,573 botocore.credentials [DEBUG] Looking for credentials via: assume-role-with-web-identity
2023-07-10 12:37:38,573 botocore.credentials [DEBUG] Looking for credentials via: sso
2023-07-10 12:37:38,573 botocore.credentials [DEBUG] Looking for credentials via: shared-credentials-file
2023-07-10 12:37:38,573 botocore.credentials [INFO] Found credentials in shared credentials file: ~/.aws/credentials
2023-07-10 12:37:38,574 botocore.loaders [DEBUG] Loading JSON file: /Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/data/endpoints.json
2023-07-10 12:37:38,578 botocore.loaders [DEBUG] Loading JSON file: /Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/data/sdk-default-configuration.json
2023-07-10 12:37:38,578 botocore.hooks [DEBUG] Event choose-service-name: calling handler <function handle_service_name_alias at 0x10213c0d0>
2023-07-10 12:37:38,592 botocore.loaders [DEBUG] Loading JSON file: /Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/data/config/2014-11-12/service-2.json
2023-07-10 12:37:38,595 botocore.hooks [DEBUG] Event creating-client-class.config-service: calling handler <function add_generate_presigned_url at 0x1020b0d30>
2023-07-10 12:37:38,596 botocore.endpoint [DEBUG] Setting config timeout as (60, 60)
2023-07-10 12:37:38,596 botocore.loaders [DEBUG] Loading JSON file: /Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/data/_retry.json
2023-07-10 12:37:38,596 botocore.client [DEBUG] Registering retry handlers for service: config
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event before-parameter-build.config-service.DeleteResourceConfig: calling handler <function generate_idempotent_uuid at 0x10213d5a0>
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event before-call.config-service.DeleteResourceConfig: calling handler <function add_recursion_detection_header at 0x10213d240>
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event before-call.config-service.DeleteResourceConfig: calling handler <function inject_api_version_header_if_needed at 0x10213edd0>
2023-07-10 12:37:38,597 botocore.endpoint [DEBUG] Making request for OperationModel(name=DeleteResourceConfig) with params: {'url_path': '/', 'query_string': '', 'method': 'POST', 'headers': {'X-Amz-Target': 'StarlingDoveService.DeleteResourceConfig', 'Content-Type': 'application/x-amz-json-1.1', 'User-Agent': 'Boto3/1.24.66 Python/3.10.7 Darwin/22.5.0 Botocore/1.27.66'}, 'body': b'{"ResourceType": "AWS::EC2::Subnet", "ResourceId": "subnet-555a2d31"}', 'url': 'https://config.us-east-1.amazonaws.com/', 'context': {'client_region': 'us-east-1', 'client_config': <botocore.config.Config object at 0x103103af0>, 'has_streaming_input': False, 'auth_type': None}}
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event request-created.config-service.DeleteResourceConfig: calling handler <bound method RequestSigner.handler of <botocore.signers.RequestSigner object at 0x1031039a0>>
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event choose-signer.config-service.DeleteResourceConfig: calling handler <function set_operation_specific_signer at 0x10213d480>
2023-07-10 12:37:38,597 botocore.auth [DEBUG] Calculating signature using v4 auth.
2023-07-10 12:37:38,597 botocore.auth [DEBUG] CanonicalRequest:
POST
/

content-type:application/x-amz-json-1.1
host:config.us-east-1.amazonaws.com
x-amz-date:20230710T070738Z
x-amz-target:StarlingDoveService.DeleteResourceConfig

content-type;host;x-amz-date;x-amz-target
ea57c6465ec66001dc2a4c7d08f3aadd19970e151137632a407ddc470cac11f9
2023-07-10 12:37:38,597 botocore.auth [DEBUG] StringToSign:
AWS4-HMAC-SHA256
20230710T070738Z
20230710/us-east-1/config/aws4_request
d0fdc8f7accfb8d1a373820cb24985bd2088c88fef6f734197a9f20e3215adc6
2023-07-10 12:37:38,597 botocore.auth [DEBUG] Signature:
e0d89d65b236cfba0e24c3d496d0686cf2ac671dd387e947e38b5a73a486ffe9
2023-07-10 12:37:38,597 botocore.hooks [DEBUG] Event request-created.config-service.DeleteResourceConfig: calling handler <function add_retry_headers at 0x10213f490>
2023-07-10 12:37:38,597 botocore.endpoint [DEBUG] Sending http request: <AWSPreparedRequest stream_output=False, method=POST, url=https://config.us-east-1.amazonaws.com/, headers={'X-Amz-Target': b'StarlingDoveService.DeleteResourceConfig', 'Content-Type': b'application/x-amz-json-1.1', 'User-Agent': b'Boto3/1.24.66 Python/3.10.7 Darwin/22.5.0 Botocore/1.27.66', 'X-Amz-Date': b'20230710T070738Z', 'Authorization': b'AWS4-HMAC-SHA256 Credential=AKIAS53WFYZ635YFA76K/20230710/us-east-1/config/aws4_request, SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=e0d89d65b236cfba0e24c3d496d0686cf2ac671dd387e947e38b5a73a486ffe9', 'amz-sdk-invocation-id': b'ad89dd95-0e0a-438b-a7c2-852f3044d36f', 'amz-sdk-request': b'attempt=1', 'Content-Length': '69'}>
2023-07-10 12:37:38,598 botocore.httpsession [DEBUG] Certificate path: /Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/certifi/cacert.pem
2023-07-10 12:37:39,773 botocore.parsers [DEBUG] Response headers: {'x-amzn-RequestId': '72877688-b559-4da4-9723-01a9f45ac6ca', 'Strict-Transport-Security': 'max-age=86400', 'Content-Type': 'application/x-amz-json-1.1', 'Content-Length': '233', 'Date': 'Mon, 10 Jul 2023 07:07:39 GMT', 'Connection': 'close'}
2023-07-10 12:37:39,773 botocore.parsers [DEBUG] Response body:
b'{"__type":"ValidationException","message":"Value 'AWS::EC2::Subnet' at 'resourceType' failed to satisfy constraint: resourceType must not have an organization name that matches any of the following 'aws', 'amazon', 'amzn', 'alexa'."}'
2023-07-10 12:37:39,776 botocore.parsers [DEBUG] Response headers: {'x-amzn-RequestId': '72877688-b559-4da4-9723-01a9f45ac6ca', 'Strict-Transport-Security': 'max-age=86400', 'Content-Type': 'application/x-amz-json-1.1', 'Content-Length': '233', 'Date': 'Mon, 10 Jul 2023 07:07:39 GMT', 'Connection': 'close'}
2023-07-10 12:37:39,777 botocore.parsers [DEBUG] Response body:
b'{"__type":"ValidationException","message":"Value 'AWS::EC2::Subnet' at 'resourceType' failed to satisfy constraint: resourceType must not have an organization name that matches any of the following 'aws', 'amazon', 'amzn', 'alexa'."}'
2023-07-10 12:37:39,777 botocore.hooks [DEBUG] Event needs-retry.config-service.DeleteResourceConfig: calling handler <botocore.retryhandler.RetryHandler object at 0x103144460>
2023-07-10 12:37:39,777 botocore.retryhandler [DEBUG] No retry needed.
Traceback (most recent call last):
File "/Users/seshu/Documents/AWS-Resource-deletion/aws_resource_deletion.py", line 537, in
get_provisioned_services()
File "/Users/seshu/Documents/AWS-Resource-deletion/aws_resource_deletion.py", line 444, in get_provisioned_services
delete_response = client.delete_resource_config(ResourceType="AWS::EC2::Subnet", ResourceId="subnet-555a2d31")
File "/Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/client.py", line 514, in _api_call
return self._make_api_call(operation_name, kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.10/lib/python3.10/site-packages/botocore/client.py", line 934, in _make_api_call
raise error_class(parsed_response, operation_name)
botocore.errorfactory.ValidationException: An error occurred (ValidationException) when calling the DeleteResourceConfig operation: Value 'AWS::EC2::Subnet' at 'resourceType' failed to satisfy constraint: resourceType must not have an organization name that matches any of the following 'aws', 'amazon', 'amzn', 'alexa'.

cc : @sgopa

Thanks.

[RyanFitzSimmonsAK]

Hi @sgopa, thanks for getting back to me. It looks like delete_resource_config is intended for use with custom resources that aren't natively supported by AWS Config. AWS::EC2::Subnet is already supported by AWS Config, so that doesn't apply. If you want to change which resources are recorded, I'd recommend taking a look at this piece of documentation. Hope that helps, and please let me know if you have any follow-up questions.