25.4.9 VNA AWS Plugin not collecting Inventory for a specific region due to permissions issue.

Products

• Network Observability

Issue/Introduction

"Failed to get inventory data for region [region-name]: You are not authorized to perform this operation․ User: [user] is not authorized to perform: ec2:DescribeVpcEndpointServiceConfigurations"

Cause

Polling for a region aborts entirely upon encountering a single permission error․

A permissions or throttling issue on a single AWS API call triggers an exception․

The previous script logic used a single per-region try/catch block, causing the entire region's inventory pull to abort and discard all data․

Resolution

1․ DOWNLOAD THE UPDATED GROOVY SCRIPTS:

GetAwsInventoryData․groovy, GetAwsPerformanceMetrics․groovy, GetAwsAlarms․groovy, and GetAwsFlowData․groovy

2․ BACKUP AND REPLACE THE SCRIPTS for each engine instance (Verify file ownership and permissions are the same):

Path: /opt/CA/VNA/collector/<ENGINE_ID>/repository/TIM-INF/groovy/scripts

No need to restart the AWS engine or Wildfly.  The updated scripts will be invoked upon the next poll cycle.

These updates will be productized in VNA 25.4.12+

 

Additional Information

Defect DE209576