In my case the IAM / Security credentials / Access key I was using (as it was set in my ~/.aws/credentials file) was inactive. I should have checked that in my AWS Console first.