https://exceptiondecoded.com/posts/aws-cloudtraildata-channelinsufficientpermissionexception/