PantherAuditRole) is not configured with sufficient permissions.
PantherAuditRoleto the latest version.
PantherAuditRolemay be granted permission to access a resource, but the resource itself may not grant permission to be accessed by our role. This can be resolved by either modifying the resource based policy to add an exception for our scanning role, or by modifying the Cloud Security integration to exclude certain resources or resource types.
no resource-based policy allows the kms:ListResourcetags action. This indicates to us that the issue is related to a resource-based policy.