TIL—AWS credentials are needed (e.g., from environment variables, IAM roles, etc.) even for public buckets. Otherwise, you can go around with NOSIGN: ``` FROM s3( 's3://bucket/path/file.csv.gz', NOSIGN, -- Forces anonymous access 'CSV' ) ```