3685057 - SAP Cloud Connector Error with CF subaccount : -"Denied access for tunnel with id"

1. Error occurs when attempting to use a specific CF subaccount tunnel for a connection from an application running on SAP Cloud Platform that tries to connect to an on-premise system .
2. Following error is present in the  ljs_trace.log (<2.17)/scc_core.trc (>=2.17) files :

          "2025-01-20 16:30:00,400 +0000#ERROR#com.sap.core.connectivity.tunnel.client.application.ApplicationClientConnectTask#Thread-2005#          #Unexpected exception while establishing application tunnel connection for tunnelId: account:///<subaccount tunnel id>/<Location id>
com.sap.core.connectivity.tunnel.client.TunnelNotAllowedException: Denied access for tunnel with id 'account:///<subaccount tunnel id>/<Location id>' and attributes: 'applicationType:Cloud Foundry Application, applicationAccount:<subaccount id>, applicationName:<name of the application>'"

*Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental

SAP Cloud Connector release independent.

Denied access for tunnel with id, sap analytics cloud, sac, s4hana, import connection, cloud connector, tunnel connection error, denied access, scc_config.ini, trustedApplications, application tab missing, cloud connector upgrade, error message, CF, subaccount, KBA 2656195, OS level file, scc_config.ini, trustedApplications class, configuration error, Cloud Connector, subaccount configuration, clear old configuration, restart SAP Cloud Connector, backup scc_config.ini, SCC installation corruption, CF subaccount tunnel, Cloud Foundry application, on-premise system connection, ljs_trace.log, scc_core.trc, TunnelNotAllowedException, tunnel ID, applicationType Cloud Foundry, applicationAccount, applicationName, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , XX-HST-OPR-INC , Incidents , Problem