Classmethod Members's region restriction
Your AWS account with a Members subscription can utilize the "Secure Account Region Restriction" feature. With region restrictions set, the AWS account is allowed to operate only in the specified regions.
opswitch tasks and region restrictions
Each opswitch task performs designated operations on the target AWS accounts and regions. However, if the AWS account's regions are not permitted due to region restrictions, the operations will be skipped. In such cases, the job will continue with subsequent tasks and will not fail.
Here is an example of a skipped operation.
| AWS account | region | restriction | opswitch task |
|---|---|---|---|
| 123456789012 | Asia Pacific (Tokyo) | ON(Allow) | execute |
| 123456789012 | Asia Pacific (Singapore) | ON(Deny) | skip |
| 234567890123 | Asia Pacific (Tokyo) | OFF | execute |
| 234567890123 | Asia Pacific (Singapore) | OFF | execute |
Note that for tasks involving copying backup resources, such as EBS snapshots, to another region, if the source region has a restricted region, the task will be skipped. On the other hand, if the destination region has a restricted region, the task will not be skipped, and the job will fail.
Notification of being skipped
If there are tasks skipped due to region restrictions, we will notify you of the skipped accounts and regions in the job execution result message (email, Slack, or Teams).
Due to region restrictions, the following accounts and regions have been skipped.
My Account(123456789012) ap-northeast-2
My Account(123456789012) ap-southeast-1
To receive the message, please refer to the following page and configure the settings accordingly.
Email notification settings for job run results
Slack notification settings for job run results
Teams notification settings for job run results
How to avoid skips and job failures
Remove restricted regions from the target regions of each task. Additionally, for tasks that involve copying backup resources to another region, ensure that both the source and destination regions are specified as allowed regions.
Note
After making changes to the settings in the members portal, there will be a delay of up to one hour before the changes are reflected in opswitch.