Error 400 creating Anthos on AWS cluster (make sure service agent has role in your fleet project)

[Former Community Member]

Error: Error creating Cluster: googleapi: Error 400: could not manage Hub Membership. Make sure service agent 
"service-<project_id>@gcp-sa-gkemulticloud.iam.gserviceaccount.com" has role "gkemulticloud.serviceAgent" in your Fleet project

I tried to create an Anthos on AWS cluster but was hit with the error above. I made sure that the Anthos Multi Cloud API is enabled and checked if the Service Agent and Role exists but for some reason the Service Agent doesn't seem to exist but the Role does exist. I thought enabling the API will automatically create the service agent and role for us.

Any help on this will be much appreciated!

[bkauf]

Hello, enabling the API does create the GCP service agent however you then need to have a matching AWS Role and Policy for that agent in AWS IAM.  You can reference the instructions on how to do this in the prerequisites here: https://cloud.google.com/anthos/clusters/docs/multi-cloud/aws/how-to/create-aws-iam-roles

Also there are terraform scripts to setup all the prereqs and deploy an Anthos on AWS cluster here:

https://cloud.google.com/anthos/clusters/docs/multi-cloud/aws/how-to/create-cluster-with-terraform