GuardDuty Demonstrate Your Skills

Unable to solve the 4th question in GuardDuty: Demonstrate Your Skills.

I tried updating the KMS policy and configuring GuardDuty findings export, but the task is still not getting completed.

Instructions say:

- GuardDuty requires a KMS key to encrypt findings exported to S3.

- The KMS key policy must give permissions to the GuardDuty service principal.

- Navigate to Key Management Service.

- Fix the key to allow GuardDuty to use it for exporting findings.

Currently, the action given to the GuardDuty service principal seems incorrect.

Could someone please help identify what might be missing in the KMS policy?