title: Incorrect S3 bucket policy is detected for bucket at Cloud Trail
body: <p>Receveing this error Incorrect S3 bucket policy is detected for bucket:</p>
  
  <blockquote>
    <p> (Service: AWSCloudTrail; Status Code: 400; Error Code: InsufficientS3BucketPolicyException; Request ID: ebaf35b8-a38e-4357-a742-af5fa92bbc43)</p>
  </blockquote>
  
  <pre><code>Parameters:
      trailname:
        Type: String
      s3bucketname:
        Type: String
  Resources:
      myvpctrail:
        DependsOn:
          - s3bucketpolicy
          - creates3bucket
        Type: AWS::CloudTrail::Trail
        Properties:
          IsLogging: true
          IsMultiRegionTrail: true
          IncludeGlobalServiceEvents: true
          S3BucketName: !Ref creates3bucket
      creates3bucket:
        Type: AWS::S3::Bucket
        Properties: 
          BucketName: !Sub ${s3bucketname}
      s3bucketpolicy:
        Type: AWS::S3::BucketPolicy
        Properties:
          Bucket: !Sub ${s3bucketname}
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Sid: 'AWSCloudTrailAclCheck20150319'
                Effect: 'Allow'
                Principal: 
                    Service: 'cloudtrail.amazonaws.com'
                Action: 's3:GetBucketAcl'
                Resource: 
                  !Sub 'arn:aws:s3:::${s3bucketname}'
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Sid: AWSCloudTrailWrite20150319
                Effect: 'Allow'
                Principal: 
                    Service: 'cloudtrail.amazonaws.com'
                Action: 's3:PutObject'
                Resource: 
                  !Sub 'arn:aws:s3:::${s3bucketname}/AWSLogs/${AWS::AccountId}/*'
                Condition:
                  StringEquals: 
                      s3:x-amz-acl: 'bucket-owner-full-control'
  </code></pre>
  
  <blockquote>
    <p>Incorrect S3 bucket policy is detected for bucket: (Service: AWSCloudTrail; Status Code: 400; Error Code: InsufficientS3BucketPolicyException; Request ID: ebaf35b8-a38e-4357-a742-af5fa92bbc43)<code>enter code here</code></p>
  </blockquote>