Cloud trail creation can fail

[Jc2k]

botocore.exceptions.ClientError: An error occurred (InvalidCloudWatchLogsLogGroupArnException) when calling the CreateTrail operation: Access denied. Check the permissions for your role.

This needs wrapping in a retry action that retries on InvalidCloudWatchLogsLogGroupArnException.

[Jc2k]

(We created the log group or at least sanity checked it first, so retrying is sensible).