https://exceptiondecoded.com/posts/aws-pcaconnectorad-accessdeniedexception/