GoldRock
CloudTrail has to be deployed from management account because TF halts on creating trail from delgate due to a race condition on describing a delegated trail
TODO: configservice bucket policy changes add key to config recorder config
asdf