PutObject operation: Access Denied

CookieFactoryDemo: creating CloudFormation changeset...
3:32:44 PM | CREATE_FAILED | AWS::CloudFormation::CustomResource | TmdtAppiottwinmakerWorkspaceData40DBAECF
Received response status [FAILED] from custom resource. Message returned: An error occurred (AccessDenied) when calling the PutObject operation: Access Denied (RequestId: 9b4e4168-57c1-492c-9903-8daa99
bc0bae)

❌ CookieFactoryV2Stack (CookieFactoryDemo) failed: Error: The stack named CookieFactoryDemo failed creation, it may need to be manually deleted from the AWS console: ROLLBACK_COMPLETE: Received response status [FAILED] from custom resource. Message returned: An error occurred (AccessDenied) when calling the PutObject operation: Access Denied (RequestId: 9b4e4168-57c1-492c-9903-8daa99bc0bae)
at FullCloudFormationDeployment.monitorDeployment (/Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:426:10236)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Object.deployStack2 [as deployStack] (/Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:429:153208)
at async /Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:429:136985

❌ Deployment failed: Error: The stack named CookieFactoryDemo failed creation, it may need to be manually deleted from the AWS console: ROLLBACK_COMPLETE: Received response status [FAILED] from custom resource. Message returned: An error occurred (AccessDenied) when calling the PutObject operation: Access Denied (RequestId: 9b4e4168-57c1-492c-9903-8daa99bc0bae)
at FullCloudFormationDeployment.monitorDeployment (/Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:426:10236)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Object.deployStack2 [as deployStack] (/Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:429:153208)
at async /Users/mk/.nvm/versions/node/v20.4.0/lib/node_modules/aws-cdk/lib/index.js:429:136985

The stack named CookieFactoryDemo failed creation, it may need to be manually deleted from the AWS console: ROLLBACK_COMPLETE: Received response status [FAILED] from custom resource. Message returned: An error occurred (AccessDenied) when calling the PutObject operation: Access Denied (RequestId: 9b4e4168-57c1-492c-9903-8daa99bc0bae)

No source file or test is named. Start with the CookieFactoryDemo CloudFormation deployment and its custom resource, then trace the IAM role and S3 permissions involved in PutObject; done means the stack creates successfully without AccessDenied.

Written by the indexing model from the issue text.