Cannot create Algo VPN in Amazon EC2 Middle East region me-central-1

[phillipmeyer]

Hello,
I am trying to set up an Algo VPN based in the Amazon EC2 Middle East region.
I have absolutely no issues setting up Algo instances in other regions (e.g. London or California).
I have enabled 'Middle East (UAE)' under 'Manage Regions'.
I have an IAM user setup with the following permissions:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PreDeployment",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeImages",
                "ec2:DescribeKeyPairs",
                "ec2:DescribeRegions",
                "ec2:ImportKeyPair",
                "ec2:CopyImage"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "DeployCloudFormationStack",
            "Effect": "Allow",
            "Action": [
                "cloudformation:CreateStack",
                "cloudformation:UpdateStack",
                "cloudformation:DescribeStacks",
                "cloudformation:DescribeStackEvents",
                "cloudformation:ListStackResources"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "CloudFormationEC2Access",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeRegions",
                "ec2:CreateInternetGateway",
                "ec2:DescribeVpcs",
                "ec2:CreateVpc",
                "ec2:DescribeInternetGateways",
                "ec2:ModifyVpcAttribute",
                "ec2:CreateTags",
                "ec2:CreateSubnet",
                "ec2:AssociateVpcCidrBlock",
                "ec2:AssociateSubnetCidrBlock",
                "ec2:AssociateRouteTable",
                "ec2:AssociateAddress",
                "ec2:CreateRouteTable",
                "ec2:AttachInternetGateway",
                "ec2:DescribeRouteTables",
                "ec2:DescribeSubnets",
                "ec2:ModifySubnetAttribute",
                "ec2:CreateRoute",
                "ec2:CreateSecurityGroup",
                "ec2:DescribeSecurityGroups",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:RunInstances",
                "ec2:DescribeInstances",
                "ec2:AllocateAddress",
                "ec2:DescribeAddresses"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

On my first attempt, I received this email from AWS:

Dear AWS Customer,

You recently requested an AWS service that required additional validation. Your request has now been validated for AWS Middle East (UAE) Region(s). If you're still experiencing difficulty, then contact us through the Support Center: ([please click here](https://p6li1chk.r.us-east-1.awstrack.me/L0/https:%2F%2Fsupport.console.aws.amazon.com%2Fsupport%2Fhome%3Fregion=us-east-1%23%2Fcase%2Fcreate%3FissueType=customer-service%26serviceCode=account-management%26categoryCode=account-verification/1/01000190590fc878-df9144a4-d706-4fdd-83f4-b61df3fd3556-000000/divbPdlB9xGhfKPs-aEb9cOVVbk=380))

Sincerely,
Amazon Web Services
This message was produced and distributed by Amazon Web Services, Inc. and affiliates, 410 Terry Ave. North, Seattle, WA 98109-5210.

However, when I try and create an Algo VPN in 'me-central-1' I get the following errors:

TASK [cloud-ec2 : Deploy the template] *************************************************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": true, "events": ["StackEvent AWS::CloudFormation::Stack algomena ROLLBACK_COMPLETE", "StackEvent AWS::EC2::VPC VPC DELETE_COMPLETE", "StackEvent AWS::EC2::InternetGateway InternetGateway DELETE_COMPLETE", "StackEvent AWS::EC2::InternetGateway InternetGateway DELETE_IN_PROGRESS", "StackEvent AWS::EC2::VPC VPC DELETE_IN_PROGRESS", "StackEvent AWS::EC2::VPCGatewayAttachment VPCGatewayAttachment DELETE_COMPLETE", "StackEvent AWS::EC2::RouteTable RouteTable DELETE_COMPLETE", "StackEvent AWS::EC2::VPCGatewayAttachment VPCGatewayAttachment DELETE_IN_PROGRESS", "StackEvent AWS::EC2::RouteTable RouteTable DELETE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet DELETE_COMPLETE", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 DELETE_COMPLETE", "StackEvent AWS::EC2::Route RouteIPv6 DELETE_COMPLETE", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 DELETE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet DELETE_IN_PROGRESS", "StackEvent AWS::EC2::Route RouteIPv6 DELETE_IN_PROGRESS", "StackEvent AWS::EC2::SubnetCidrBlock SubnetIPv6 DELETE_COMPLETE", "StackEvent AWS::EC2::SecurityGroup InstanceSecurityGroup DELETE_COMPLETE", "StackEvent AWS::EC2::SubnetCidrBlock SubnetIPv6 DELETE_IN_PROGRESS", "StackEvent AWS::EC2::SecurityGroup InstanceSecurityGroup DELETE_IN_PROGRESS", "StackEvent AWS::EC2::Instance EC2Instance DELETE_COMPLETE", "StackEvent AWS::EC2::Route Route DELETE_COMPLETE", "StackEvent AWS::EC2::Route Route DELETE_IN_PROGRESS", "StackEvent AWS::EC2::SubnetRouteTableAssociation RouteSubnet DELETE_COMPLETE", "StackEvent AWS::EC2::SubnetRouteTableAssociation RouteSubnet DELETE_IN_PROGRESS", "StackEvent AWS::CloudFormation::Stack algomena ROLLBACK_IN_PROGRESS", "StackEvent AWS::EC2::Instance EC2Instance CREATE_FAILED", "StackEvent AWS::EC2::Instance EC2Instance CREATE_IN_PROGRESS", "StackEvent AWS::EC2::SubnetCidrBlock SubnetIPv6 CREATE_COMPLETE", "StackEvent AWS::EC2::SubnetCidrBlock SubnetIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::SubnetCidrBlock SubnetIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 CREATE_COMPLETE", "StackEvent AWS::EC2::SubnetRouteTableAssociation RouteSubnet CREATE_COMPLETE", "StackEvent AWS::EC2::SubnetRouteTableAssociation RouteSubnet CREATE_IN_PROGRESS", "StackEvent AWS::EC2::SubnetRouteTableAssociation RouteSubnet CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Route RouteIPv6 CREATE_COMPLETE", "StackEvent AWS::EC2::Route Route CREATE_COMPLETE", "StackEvent AWS::EC2::Route RouteIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Route Route CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Route Route CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Route RouteIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::RouteTable RouteTable CREATE_COMPLETE", "StackEvent AWS::EC2::SecurityGroup InstanceSecurityGroup CREATE_COMPLETE", "StackEvent AWS::EC2::SecurityGroup InstanceSecurityGroup CREATE_IN_PROGRESS", "StackEvent AWS::EC2::SecurityGroup InstanceSecurityGroup CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet CREATE_COMPLETE", "StackEvent AWS::EC2::InternetGateway InternetGateway CREATE_COMPLETE", "StackEvent AWS::EC2::VPCGatewayAttachment VPCGatewayAttachment CREATE_COMPLETE", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet CREATE_IN_PROGRESS", "StackEvent AWS::EC2::RouteTable RouteTable CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet CREATE_IN_PROGRESS", "StackEvent AWS::EC2::RouteTable RouteTable CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPCGatewayAttachment VPCGatewayAttachment CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPCGatewayAttachment VPCGatewayAttachment CREATE_IN_PROGRESS", "StackEvent AWS::EC2::RouteTable RouteTable CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPCCidrBlock VPCIPv6 CREATE_IN_PROGRESS", "StackEvent AWS::EC2::Subnet Subnet CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPC VPC CREATE_COMPLETE", "StackEvent AWS::EC2::InternetGateway InternetGateway CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPC VPC CREATE_IN_PROGRESS", "StackEvent AWS::EC2::InternetGateway InternetGateway CREATE_IN_PROGRESS", "StackEvent AWS::EC2::VPC VPC CREATE_IN_PROGRESS", "StackEvent AWS::EC2::InternetGateway InternetGateway CREATE_IN_PROGRESS", "StackEvent AWS::CloudFormation::Stack algomena CREATE_IN_PROGRESS"], "log": ["AWS::EC2::Instance EC2Instance CREATE_FAILED: Resource handler returned message: \"The requested configuration is currently not supported. Please check the documentation for supported configurations. (Service: Ec2, Status Code: 400, Request ID: 58f0be31-b357-4915-bdae-8f3cd13c8032)\" (RequestToken: d0beb015-1222-1516-c832-69ce43bf7953, HandlerErrorCode: InvalidRequest)"], "output": "Problem with CREATE. Rollback complete", "stack_outputs": {}, "stack_resources": [{"last_updated_time": "2024-06-30T03:52:05.219000+00:00", "logical_resource_id": "EC2Instance", "physical_resource_id": "", "resource_type": "AWS::EC2::Instance", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:06.999000+00:00", "logical_resource_id": "InstanceSecurityGroup", "physical_resource_id": "sg-08abb77bf33995caf", "resource_type": "AWS::EC2::SecurityGroup", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:11.658000+00:00", "logical_resource_id": "InternetGateway", "physical_resource_id": "igw-0aab9b9173f544d20", "resource_type": "AWS::EC2::InternetGateway", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:50:18.450000+00:00", "logical_resource_id": "Route", "physical_resource_id": "rtb-0f4e9581d2d6137a8|0.0.0.0/0", "resource_type": "AWS::EC2::Route", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:08.592000+00:00", "logical_resource_id": "RouteIPv6", "physical_resource_id": "rtb-0f4e9581d2d6137a8|::/0", "resource_type": "AWS::EC2::Route", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:50:16.931000+00:00", "logical_resource_id": "RouteSubnet", "physical_resource_id": "rtbassoc-0c3dba901fc94f76b", "resource_type": "AWS::EC2::SubnetRouteTableAssociation", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:10.196000+00:00", "logical_resource_id": "RouteTable", "physical_resource_id": "rtb-0f4e9581d2d6137a8", "resource_type": "AWS::EC2::RouteTable", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:08.970000+00:00", "logical_resource_id": "Subnet", "physical_resource_id": "subnet-0bbe64073c58dd0a5", "resource_type": "AWS::EC2::Subnet", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:07.164000+00:00", "logical_resource_id": "SubnetIPv6", "physical_resource_id": "subnet-cidr-assoc-049ade15ce6cda22c", "resource_type": "AWS::EC2::SubnetCidrBlock", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:12.177000+00:00", "logical_resource_id": "VPC", "physical_resource_id": "vpc-089b1cf8d7991d4a7", "resource_type": "AWS::EC2::VPC", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:10.266000+00:00", "logical_resource_id": "VPCGatewayAttachment", "physical_resource_id": "IGW|vpc-089b1cf8d7991d4a7", "resource_type": "AWS::EC2::VPCGatewayAttachment", "status": "DELETE_COMPLETE", "status_reason": null}, {"last_updated_time": "2024-06-30T03:52:08.951000+00:00", "logical_resource_id": "VPCIPv6", "physical_resource_id": "vpc-cidr-assoc-0a5b7ab5b6c13398d", "resource_type": "AWS::EC2::VPCCidrBlock", "status": "DELETE_COMPLETE", "status_reason": null}]}

TASK [include_tasks] *******************************************************************************************************************************************************************************************************
included: /home/ubuntu/algo/playbooks/rescue.yml for localhost

TASK [debug] ***************************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "fail_hint": [
        "Sorry, but something went wrong!",
        "Please check the troubleshooting guide.",
        "https://trailofbits.github.io/algo/troubleshooting.html"
    ]
}

TASK [Fail the installation] ***********************************************************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed as requested from task"}

PLAY RECAP *****************************************************************************************************************************************************************************************************************
localhost                  : ok=37   changed=6    unreachable=0    failed=1    skipped=5    rescued=1    ignored=0   

Can anyone help?

[phillipmeyer]

For anyone else who has this problem, it was very simple:
Algo creates a t2.micro instance by default but t2 instances are not supported in the Middle East.
-To fix this simply change config.cfg and edit the default instance type under ec2