So it turns out it was a policy issue. One other thing I tried to rule out improper use of the SDK was to change the Secret OCID value. When I did this, It returned a 400 invalid format. This indicated that I was reaching the service ok with the Authorization I had