Status: IN
CloudTrail Lake channel resource-based policies only allow one action: `cloudtrail-data:PutAuditEvents` (note the `cloudtrail-data` service prefix, not `cloudtrail`).
Source: entries/2026/03/12/awscloudtrail-latest-userguide-security_iam_resource-based-policy-exampleshtml.md