Hi Adam, this is likely a permissions issue tied to the user account that is trying to access the data. Both the bucket has to allow the actions (which it does) and the user trying to do the action has to allow it. You should check the IAM permissions tied to the credentials you are using to sign the request.
Thanks for the response. Turns out your bucket is in eu-central-1 and our organization has a service control policy preventing access to eu-central-1. We’ve fixed it now. Thanks again.