CloudFormation Faulire on the Service CDK deployment

[mccmatl-sb]

ServicesApplicationInsights 
Likely root cause

Resource handler returned message: "An error occurred (AccessDenied) when getting resource group details, please verify security token and try again! (Service: ApplicationInsights, Status Code: 400, Request ID: 5944f681-e4cf-43d4-959b-beefafa02853) (SDK Attempt Count: 1)" (RequestToken: 5acf1724-18ff-4294-81ab-7619082214a8, HandlerErrorCode: AccessDenied)

The managed aws service linked role AWSServiceRoleForApplicationInsights does not appear to have sufficient permissions; I think it will need additional permissions:

{
  "Sid": "AllowResourceGroupsAccess",
  "Effect": "Allow", 
  "Action": [
    "resource-groups:GetGroup",
    "resource-groups:ListGroups",
    "resource-groups:ListGroupResources"
  ],
  "Resource": "*"
},
{
  "Sid": "AllowApplicationInsights",
  "Effect": "Allow",
  "Action": [
    "applicationinsights:*"
  ],
  "Resource": "*"
}