[Bug] Create sub task stack failed - "xxxxxxx is not authorized to perform: dynamodb:TagResource on resource"

[YikaiHu]

Describe the bug
Create sub task stack failed.
And the CloudFormation Event log shows that: "xxxxxxx is not authorized to perform: dynamodb:TagResource on resource xxxx"

To Reproduce
Create a new AWS Account.
Deploy DTH portal stack.
Create a s3 transfer task.

Expected behavior
Task is created successfully.

Please complete the following information about the solution:

• Version: [v2.6.0]

[YikaiHu]

We found that some accounts may encounter the above problems when starting S3 tasks after newly deploying DTH.

Here is the workaround:

1. Go to Lambda and search for APICfnWorkflowCreateTaskCfnFn

2. Click Configuration, Permissions. Click Role Name

3. Click Add permissions
   Click Attach policy. Temporarily Attach an Admin policy.

4. Recreate the task