When working with AWS Control Tower as part of an AWS Organisation, it is important to ensure that the SCP policies will permit AUTOMATE+ to deploy. Also make sure in AWS Control Tower ap-southeast-2 (Sydney) region is added. if you are using region deny settings.
This text file contains the appropriate SCP exclusions to ensure that AUTOMATE+ will deploy when leveraging SCPs.
...