Screen recording export 403 on legal hold metadata

Having some issues getting my configuration to work for screen recording exports in our legal discovery workflow. the bulk export job fails with a 403 forbidden error when trying to pull screen capture metadata for interactions tagged with legal hold. voice and digital channel exports work fine with the same python sdk 2.14.0 setup against genesys cloud eu-west-1. the issue seems specific to screen recording assets stored on our byoc edge node. we have verified the iam role has s3 read permissions and the recording api v2 permissions are correct. the error occurs immediately upon job submission. is there a specific permission required for screen recording metadata in legal hold scenarios? we need to maintain chain of custody for these recordings so we cannot bypass the legal hold filter. any insights on why the 403 is triggered only for screen recordings would be appreciated. we are using the standard recording export api endpoint with the include_metadata flag set to true. the problem persists across multiple export attempts today.