Problem Description
Backups for Amazon EC2 instances may fail with the following error message:
The tag policy does not allow the specified value for the following tag key: 'CCOE-ENV'. This typically occurs when AWS tag policies are enforced and required tags are missing or incorrectly configured.
Cause
The failure occurs due to a tag policy violation in the AWS account. When a required tag (e.g., CCOE-ENV) is missing or has an invalid value, backup operations that rely on tag-based policies cannot proceed successfully.
Traceback
Error Message from Backup Job: "statusmessage": "The tag policy does not allow the specified value for the following tag key: 'CCOE-ENV'." "statuscode": "TagPolicyViolation"
Resolution
Verify Tag Policy:
Check the AWS tag policy applied to the account and identify required tags and allowed values.Update Tags on Instances:
Ensure all affected EC2 instances have the required tags with correct values as per the tag policy.Review Backup Policy:
Confirm that the backup solution (e.g., Druva CloudRanger) includes the necessary tags in its configuration.Retry Backups:
After correcting tags, re-run the backup jobs to validate successful completion.