Listing Keys with CloudControl API always fails

[benbridts]

~$ aws kms list-keys
{
    "Keys": [
        {
            "KeyId": "6c95ef5f-xxxx-xxxx-xxxx-xxxxxxxxxxx",
            "KeyArn": "arn:aws:kms:eu-west-3:123456789012:key/6c95ef5f-xxxx-xxxx-xxxx-xxxxxxxxxxx"
        },
        {
            "KeyId": "b8ddeed6-xxxx-xxxx-xxxx-xxxxxxxxxxx",
            "KeyArn": "arn:aws:kms:eu-west-3:123456789012:key/b8ddeed6-xxxx-xxxx-xxxx-xxxxxxxxxxx"
        }
    ]
}
~$ aws cloudcontrol list-resources --type-name AWS::KMS::Key

An error occurred (GeneralServiceException) when calling the ListResources operation: AWS::KMS::Key Handler
returned status FAILED: Error occurred during operation 'ListKeys'. (HandlerErrorCode: GeneralServiceException,
RequestToken: 4fa1929d-fd93-435b-8f21-218e1401e6a9)