Closed
Description
Expected Behavior
I should be able to use Datadog layer within my Lambda function in ap-southeast-5.
Actual Behavior
I'm getting the following error when I try to invoke my Lambda function:
You are not authorized to perform: lambda:GetLayerVersion.
Steps to Reproduce the Problem
- Create a new Node.js Lambda function.
- Add Datadog as a layer.
- Deploy the Lambda function.
- Observe the error.
Specifications
Datadog NodeLayerVersion: 115
Datadog ExtensionLayerVersion: 64
Node version: 20.x
Stacktrace
Resource handler returned message: "User: arn:aws:sts::123456789:assumed-role/cdk-hnb659fds-cfn-exec-role-123456789-ap-southeast-5/AWSCloudFormation is not authorized to perform: lambda:GetLayerVersion on resource: arn:aws:lambda:ap-southeast-5:464622532012:layer:Datadog-Extension-ARM:64 because no resource-based policy allows the lambda:GetLayerVersion action (Service: Lambda, Status Code: 403, Request ID: 1bb0b373-28e9-479a-8736-e9d5f251336e)" (RequestToken: 95384fe1-a7a8-522c-02da-83831992d8b9, HandlerErrorCode: AccessDenied)