If it is so simple as a authorization concern, try placing the CA pem file to one thing less restrictive like so: when you have proxy additional to the ec2 devices and it can be in non-public subnet which has a S3 vpc-endpoint hooked up. I had been receiving the https://holdenockbj.newbigblog.com/35161498/how-much-you-need-to-expect-you-ll-pay-for-a-good-iam997