[Bug] S3 Task Creation Failed - due to the Invalid IAM policy

[YikaiHu]

Describe the bug
The task fails to create and in the corresponding cloudformation stack it is seen that the iam policy fails to create with error:
Resource handler returned message: “Invalid policy (Service: Iam, Status Code: 400, Request ID: 852aa9bf-a51c-4588-bd84-e66357f7a67c)” (RequestToken: 4f9f8300-6a47-9acd-3dec-278c5272917d, HandlerErrorCode: InvalidRequest)

This deployment failure is due to changes in the underlying IAM logic of AWS. As a result, this issue may occur in some new AWS accounts.

To Reproduce
Create a S3 Transfer Task.

Please complete the following information about the solution:

• Version: v2.6.1

[YikaiHu]

Workaround for S3 Plugin User

If you are only using S3 Plugin (not DTH Console), you can using this patch template

DataTransferS3Stack-fix-0509.json

[YikaiHu]

Workaround for DTH Web Console User

Step 1 Download the patched cloudformation template

DataTransferS3Stack-fix-0509.json

Step 2 Upload this template to a S3 bucket, and public this template.

• You can choose any S3 bucket
• You have to make this template public
• Copy the template's Object URL, this URL will be used in Step3

Step 3 Update the Lambda Environment variables

Go to AWS Lambda Console.
Search for Data Transfer Hub - API V1

And change the PLUGIN_TEMPLATE_S3EC2 to your patched template URL

Step 4 Go back to DTH console, clone or create a new S3 transfer task.

[timandy]

I have the same problem. Can I rollback to the old version to solve the problem. @YikaiHu