Missing cloudwatch:TagResource permissions

[billyshambrook]

Expected Behavior

Actual Behavior

Am getting the following error when executing the streams_main.yaml

Resource handler returned message: "Resource of type 'Stack set operation [00000000-0000-0000-0000-000000000000] was unexpectedly stopped or failed. status reason(s): [ResourceLogicalId:DatadogMetricStreamAllNamespaces, ResourceType:AWS::CloudWatch::MetricStream, ResourceStatusReason:Resource handler returned message: "Invalid request provided: User: arn:aws:sts::1234567890123:assumed-role/DatadogStreamStackSetExecutionRole/00000000-0000-0000-0000-000000000000 is not authorized to perform: cloudwatch:TagResource on resource: arn:aws:cloudwatch:ap-south-1:1234567890123:metric-stream/datadog-metrics-stream because no identity-based policy allows the cloudwatch:TagResource action" (RequestToken: 00000000-0000-0000-0000-000000000000, HandlerErrorCode: InvalidRequest).]' with identifier 'DatadogStreams:00000000-0000-0000-0000-000000000000' did not stabilize." (RequestToken: 00000000-0000-0000-0000-000000000000, HandlerErrorCode: NotStabilized)

Steps to Reproduce the Problem

Specifications

• Datadog CloudFormation template version:

Stacktrace

Paste here