Using CloudTrail - AWS Certificate Manager Private Certificate Authority