search

DataDog / cloudformation-template

Easily set up the Datadog AWS integration using CloudFormation
Apache License 2.0
34 stars 42 forks source link

Add logs:TagResource permissions #61

Closed billyshambrook closed 1 year ago

billyshambrook commented 1 year ago

What does this PR do?

Add missing logs:TagResource permission to stackset role.

Motivation

I get the following error when trying to execute the cloud formation template:

Resource of type 'Stack set operation [206bd3cf-9bf0-450c-b323-0bcf979d4f4b] was unexpectedly stopped or failed. status reason(s):
  [ResourceLogicalId:DatadogStreamLogs, ResourceType:AWS::Logs::LogGroup, ResourceStatusReason:Resource handler returned message: "User with accountId: 111111111111 is not authorized to perform CreateLogGroup with Tags.
  An additional permission "logs:TagResource" is required. (Service: CloudWatchLogs, Status Code: 400, Request ID: fc9bb4e4-9745-428c-9fc0-22b0ebdf34b0)"

Testing Guidelines

How did you test this pull request?

Additional Notes

Anything else we should know when reviewing?