I tried both a general purpose key that had access to all buckets, and one limited to the test bucket. Both times with read-and-write