title: Excon::Errors::Forbidden (Expected(200) <=> Actual(403 Forbidden)
body: <p>When I try to upload a picture to a "Car" object I'm denied access to S3.  But the site images that are in the assets folder have displayed just fine since I added S3.  The specific error that I get is this:</p>
  
  <pre><code>2015-02-17T14:40:48.459629+00:00 app[web.1]: Excon::Errors::Forbidden (Expected(200) &lt;=&gt; Actual(403 Forbidden)
  2015-02-17T14:40:48.459630+00:00 app[web.1]: excon.error.response
  2015-02-17T14:40:48.459635+00:00 app[web.1]:     "Connection"       =&gt; "close"
  2015-02-17T14:40:48.459637+00:00 app[web.1]:     "Content-Type"     =&gt; "application/xml"
  2015-02-17T14:40:48.459639+00:00 app[web.1]:     "Date"             =&gt; "Tue, 17 Feb 2015 14:40:48 GMT"
  2015-02-17T14:40:48.459640+00:00 app[web.1]:     "Server"           =&gt; "AmazonS3"
  2015-02-17T14:40:48.459632+00:00 app[web.1]:   :body          =&gt; "&lt;?xml version=\"1.0\" encoding=\"UTF-8\"?&gt;\n&lt;Error&gt;&lt;Code&gt;AccessDenied&lt;/Code&gt;&lt;Message&gt;Access Denied&lt;/Message&gt;&lt;RequestId&gt;2CE306ACD51F02A1&lt;/RequestId&gt;&lt;HostId&gt;tKLXUAKxyDFTMExl7kE+AuVVsEJOFqXh983li6N7R2UlYDXv1Z3GJRvW5zy1XIXVs2zArp310vg=&lt;/HostId&gt;&lt;/Error&gt;"
  2015-02-17T14:40:48.459642+00:00 app[web.1]:     "x-amz-id-2"       =&gt; ""part of secret key"="
  </code></pre>
  
  <p>With "part of secret key" obviously redacted. I've tried creating a different user and using new keys, but that hasn't worked.  Not where to go from here.</p>
  
  <p><strong>app/uploaders/picture_uploader</strong></p>
  
  <pre><code>class PictureUploader &lt; CarrierWave::Uploader::Base
    include CarrierWave::MiniMagick
    process resize_to_limit: [400, 400]
  
    if Rails.env.production?
      storage :fog
    else
      storage :file
    end
  
    # Override the directory where uploaded files will be stored.
    # This is a sensible default for uploaders that are meant to be mounted:
    def store_dir
      "uploads/#{model.class.to_s.underscore}/#{mounted_as}/#{model.id}"
    end
  
    # Add a white list of extensions which are allowed to be uploaded.
    def extension_white_list
      %w(jpg jpeg gif png)
    end
  end
  </code></pre>
  
  <p><strong>carrier_wave.rb</strong></p>
  
  <pre><code>if Rails.env.production?
    CarrierWave.configure do |config|
      config.fog_credentials = {
        # Configuration for Amazon S3
        :provider              =&gt; 'AWS',
        :aws_access_key_id     =&gt; ENV['S3_ACCESS_KEY'],
        :aws_secret_access_key =&gt; ENV['S3_SECRET_KEY']
      }
      config.fog_directory     =  ENV['S3_BUCKET']
    end
  end
  </code></pre>
  
  <p>I believe that's all of the relevant files, let me know if there's more to see.  Not sure if specifying a region or a power user would help, doesn't seem like it would.</p>