Log archives to S3 and rehydration not working with organization template

[andyshinn]

Expected Behavior

To be able to set up log archiving and rehydration to a S3 bucket that allows the DatadogIntegrationRole to push logs.

Actual Behavior

Setting up logging is failing with:

Archive configuration failed because: User: arn:aws:sts::000000000000:assumed-role/DatadogIntegrationRole/datadog-logs-archive is not authorized to perform: s3:PutObject on resource: "arn:aws:s3:::datadog-logs-archive-34876583647/datadog-logs/permission_testing/datadog_test_GYg_uOlaQAyVDyKejBNe7g.txt" because no identity-based policy allows the s3:PutObject action

Steps to Reproduce the Problem

1. Set up organization CloudFormation StackSet
2. Try to configure log archiving to an account bucket
3. Get error

Specifications

• Datadog CloudFormation template version: Not sure. No version listed anywhere in the template.

Stacktrace

None