Thanks for the reply - I use static sites on S3 a lot, so pretty confident of the setup. I've also replaced the installation ones with my usual policies (slightly different) and getting the same error. Anything else I can try?