title: S3 Batch Operations - "Reading the manifest is forbidden: Access Denied"
body: <p>I'm trying to setup PUT COPY S3 Batch Operations Job. I'm following the AWS guide exactly how it's written, but every time I'm greeted with the Status: Failed with failure reason: "Reading the manifest is forbidden: AccessDenied".</p>
  
  <p>I've managed to get it work by doing the job with IAM role that has AdministratorAccess policy, but I would like to get that working with a little less permissions. I've tried setting permissions with giving permissions "Allow *" for the three buckets (Source, Destination and Manifest) and all the files inside them ("ARN" and "ARN/*"), but that doesn't work. Even AmazonS3FullAccess (Allow s3: *) gives the same error.</p>
  
  <p>I'm out of ideas, how to continue with this. Apparently the role needs more permissions, but what?</p>