Introduction to AWS Key Management ServiceGo to Lab
You should add a check that the cloudtrail console section is in the same region as the where the bucket was created (my key was in us-east-1 and cloudtrail was in us-west-1 which caused issues.) Otherwise the lab was pretty good
Apparently the bucket names have global namespace so I could not create a testbucket as it already existed. Really confusing.