botocore.exceptions.ClientError: An error occurred (InvalidCloudWatchLogsLogGroupArnException) when calling the CreateTrail operation: Access denied. Check the permissions for your role.
This needs wrapping in a retry action that retries on InvalidCloudWatchLogsLogGroupArnException.