I am trying to update ACL’s and create a topic. My security group rules and keys seem ok, but still getting the following when running ./kafka-acls.sh --add --allow-principal "User:CN=admin" --operation All --cluster --bootstrap-server "{Bootstrap URls from AWS}" --command-config admin.properties

Error while executing ACL command: 
org.apache.kafka.common.errors.ClusterAuthorizationException: Request 
Request(processor=12, connectionId=10.10.11.48:9094-10.10.8.249:49662-0, 
session=Session(User:CN=admin,/10.10.8.249), listenerName=ListenerName(CLIENT_SECURE), 
securityProtocol=SSL, buffer=java.nio.HeapByteBuffer[pos=61 lim=61 cap=61], 
envelope=None) is not authorized.
java.util.concurrent.ExecutionException: 
org.apache.kafka.common.errors.ClusterAuthorizationException: Request 
Request(processor=12, connectionId=10.10.11.48:9094-10.10.8.249:49662-0, 
session=Session(User:CN=admin,/10.10.8.249), listenerName=ListenerName(CLIENT_SECURE), 
securityProtocol=SSL, buffer=java.nio.HeapByteBuffer[pos=61 lim=61 cap=61], 
envelope=None) is not authorized.
        at java.util.concurrent.CompletableFuture.reportGet(CompletableFuture.java:357)
        at java.util.concurrent.CompletableFuture.get(CompletableFuture.java:1908)
        at org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:165)
        at 
kafka.admin.AclCommand$AdminClientService.$anonfun$addAcls$3(AclCommand.scala:115)
        at scala.collection.IterableOnceOps.foreach(IterableOnce.scala:575)
        at scala.collection.IterableOnceOps.foreach$(IterableOnce.scala:573)
        at scala.collection.AbstractIterable.foreach(Iterable.scala:933)
        at scala.collection.IterableOps$WithFilter.foreach(Iterable.scala:903)
        at 
kafka.admin.AclCommand$AdminClientService.$anonfun$addAcls$1(AclCommand.scala:112)
        at kafka.admin.AclCommand$AdminClientService.addAcls(AclCommand.scala:111)
        at kafka.admin.AclCommand$.main(AclCommand.scala:73)
        at kafka.admin.AclCommand.main(AclCommand.scala)
Caused by: org.apache.kafka.common.errors.ClusterAuthorizationException: Request 
Request(processor=12, connectionId=10.10.11.48:9094-10.10.8.249:49662-0, 
session=Session(User:CN=admin,/10.10.8.249), listenerName=ListenerName(CLIENT_SECURE), 
securityProtocol=SSL, buffer=java.nio.HeapByteBuffer[pos=61 lim=61 cap=61], 
envelope=None) is not authorized.

contents of admin.properties

bootstrap.servers={bootstrap urls via AWS}
security.protocol=SSL
ssl.keystore.location=./admin.p12
ssl.keystore.type=PKCS12
ssl.keystore.password=