From 41eab168a5e6e1047b8be9425f2bbb77ef58bf93 Mon Sep 17 00:00:00 2001
From: Leo Toikka <leo.toikka@solita.fi>
Date: Sat, 17 Jun 2023 16:45:45 +0300
Subject: [PATCH] Add sagemaker:AddTags policy for CreateTransformJob policy
 statements

Fixes: aws/aws-cdk#26013.
---
 .../lib/sagemaker/create-transform-job.ts                     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/create-transform-job.ts b/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/create-transform-job.ts
index 9503c6e432339..4c86d01c4a280 100644
--- a/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/create-transform-job.ts
+++ b/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/create-transform-job.ts
@@ -282,6 +282,10 @@ export class SageMakerCreateTransformJob extends sfn.TaskStateBase {
             }),
           ],
         }),
+        new iam.PolicyStatement({
+          actions: ['sagemaker:AddTags'],
+          resources: ['*'],
+        }),
       );
     }