Второй пилот AWS не может создать ресурсы

Question

Пытаюсь следовать этому руководству для второго пилота AWS, но терминал показывает неудачный вывод. Непонятно, что происходит, поэтому вот некоторые выходные + политика разрешений.

Вот моя политика разрешений IAM:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "iam:*",
                "ssm:*",
                "cloudformation:*",
                "ecr:*",
                "sts:*",
                "tag:*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": "ssm:PutParameter",
            "Resource": "arn:aws:ssm:us-east-1:xxxxxx61741:parameter/*"
        }
    ]
}

Вывод:

Use existing application: No
Application name: demo
Workload type: Load Balanced Web Service
Service name: api
Dockerfile: ./Dockerfile
no EXPOSE statements in Dockerfile ./Dockerfile
Port: 
Ok great, we'll set up a Load Balanced Web Service named api in application demo listening on port 80.

✔ Created the infrastructure to manage services and jobs under application demo.

✔ Wrote the manifest for service api at ../api/manifest.yml
Your manifest contains configurations like your container size and port (:80).

✔ Created ECR repositories for service api.

All right, you're all set for local development.
Deploy: Yes

✘ Failed to create the infrastructure for the test environment.
- Virtual private cloud on 2 availability zones to hold your services and jobs     [Complete]
  - Internet gateway to connect the network to the internet                        [Failed]
  Resource creation cancelled                                                               
  - Public subnets for internet facing services and jobs                           [Failed]
  Resource creation cancelled                                                               
  - Private subnets for services and jobs that can't be reached from the internet  [Failed]
  Resource creation cancelled                                                               
  - Routing tables for services and jobs to talk with each other                   [Complete]
- ECS Cluster to hold your services and jobs                                       [Complete]
✘ wait until stack demo-test create is complete: ResourceNotReady: failed waiting for successful resource state

Есть идеи, что происходит? Это ошибка разрешений? Как я могу это отладить?