AWS log forwarder CloudFormation template fails to deploy because it can't call lambda:GetLayerVersion (AccessDenied) .

[jumpeinoda]

Describe what happened:
Deploying the Cloudformation template results in this error.
You are not authorized to perform: lambda:GetLayerVersion. even though my AWS Role has Administrator permissions

Datadog Lambda Layer version: 55

StackTrace
"User: xxxx is not authorized to perform: lambda:GetLayerVersion on resource: arn:aws:lambda:ap-northeast-1:464622532012:layer:Datadog-Forwarder:55 because no resource-based policy allows the lambda:GetLayerVersion action (Service: Lambda, Status Code: 403, Request ID: xxxxxx)" (RequestToken: xxxxx, HandlerErrorCode: AccessDenied)

Describe what you expected:
I should be able to use lambda runtime layer in ap-northeast-1 region of AWS

Steps to reproduce the issue:

• Deploy the Cloudformation template to ap-northeast-1
• AWS Console will error out saying You are not authorized to perform: lambda:GetLayerVersion.

This is referenced in DataDog/datadog-lambda-python#240 also.