Just noticed that our bulk export jobs for legal hold are failing intermittently. We use a BYOC setup with S3. The API returns 403 Forbidden with message AccessDenied. Background: We need chain of custody for WhatsApp interactions. Issue: Export fails only when legal_hold flag is true. Troubleshooting: Verified IAM role has s3:PutObject. Works for standard exports. Is there a specific permission missing for legal hold metadata?