'Permission Denied' erorrs on CloudTrail Integration

[Kate_M]

Description	You have set up a CloudTrail integration and are receiving 'permission denied' errors in the Lacework settings page
Scope
Solution	Example Environment: AWS with CloudTrail configured  Bucket resides in another account where the Lacework cross account role resides  To check this go to the cloudtrail page. The issue here is that the permission denied errors are likely coming from getBucketLocation calls made by Lacework  https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLocation.html The call fails as the account calling is not the bucket owner account. To remedy this, please ensure that the CloudTrail log bucket is in  the same account in which the Lacework Cross account role resides    Please reach out to Lacework support for some further guidance if needed.