Is it due to the s3 permissions in the secret keys? Do you have a list of s3 actions required?