Could not create a database trigger on AWS RDS
Turns out, Amazon RDS by default turns on binary logging that prevents "CREATE TRIGGER" to succeed, and CiviCRM interprets this as insufficient permissions. More here. For now I turned off automatic backups and completed installation successfully.