AWS IAM Identity Center: Fix Kiro Pro Subscription Creation Error

Select Language:

If you’re having trouble assigning a Kiro Pro subscription to your users in AWS, here’s a simple step-by-step guide to help you resolve the issue.

First, make sure all your environment details are in order. Your AWS account ID should be correct, and you should be working in the us-east-1 region. Confirm that you have AWS Identity Center (formerly IAM Identity Center) configured properly, and that your users are created and active. Also, double-check that your payment method and AWS Activate credits are set up and active, and that your Kiro profile has been created successfully.

Now, the main problem occurs when trying to assign a Kiro Pro subscription to any IAM Identity Center user. The operation fails with a message saying “Failed to create Kiro subscription for 1 user.” Checking CloudTrail logs reveals an event with the source q.amazonaws.com and the event name CreateAssignment, but it reports an error code of UnknownError and a message stating, “An unknown error occurred.” This issue has been happening since June 13 and is ongoing. You’ll notice that while your IAM Identity Center users are visible and selectable in Kiro, the subscriptions still won’t assign properly.

To fix this, try the following steps:

Verify Permissions: Make sure your user account has the necessary permissions to create subscriptions and assign them to users. You may need administrative privileges.
Check Kiro and AWS Integration: Revisit your Kiro profile setup and confirm that all integration steps with AWS Identity Center are correctly completed. Sometimes, re-authenticating or re-establishing the connection helps.
Update Software and Settings: Ensure that all your software, including AWS CLI, Kiro, and any related tools, are updated to their latest versions. Compatibility issues can cause unexpected errors.
Review Billing and Credits: Although your payment method and credits are configured, double-check that there are no billing issues or restrictions preventing subscription assignments.
Contact Support: If the problem persists after all these checks, reaching out to AWS Support or Kiro’s support team can help. Provide them with details like your account ID, region, and error logs for faster assistance.
Workaround: As a temporary measure, try assigning subscriptions to individual users manually, if that option is available, or test with a different user account to rule out user-specific issues.

By following these steps, you can troubleshoot the issue systematically. Often, such errors occur due to permission or configuration hiccups, which are resolvable once identified. If all else fails, support channels are your best resource for a quick resolution.