https://exceptiondecoded.com/posts/aws-forbiddenexception/