docs(obj): update api key troubleshooting MTA-5528

Author: SamyOubouaziz

pages/object-storage/troubleshooting/api-key-does-not-work.mdx

@@ -7,7 +7,7 @@ content:
   paragraph: Fix issues with non-functional API keys in Object Storage.
 tags: api key bucket object storage aws cli
 dates:
-  validation: 2025-01-15
+  validation: 2025-01-30
   posted: 2023-12-15
 categories:
   - storage
@@ -26,6 +26,8 @@ When using third-party API or CLI tools, such as the [AWS CLI](/object-storage/a
 
 - The tool returns `An error occurred (Forbidden) when calling the ListObjectsV2 operation: Forbidden` or a similar message.
 
+- The tool returns a `403` error.
+
 ## Cause
 
 The API key you used to configure the Amazon S3 third-party tool has a [preferred Project](/iam/concepts/#preferred-project) assigned.
@@ -34,17 +36,23 @@ If you try to perform Object Storage operations in a Project that is **NOT** the
 
 ## Solution
 
-You can change the preferred project of your API key:
+1. Make sure that you are using a valid [API key](https://console.scaleway.com/iam/api-keys).
+
+2. Make sure that the bearer of the API key (IAM [user](/iam/concepts/#user) or [application](/iam/concepts/#application)) has the appropriate [IAM permissions](/iam/how-to/view-permission-sets/) to perform the desired actions.
 
-- by editing it from the [Scaleway console](/iam/how-to/manage-api-keys/#how-to-edit-an-api-key)
-- by [overriding it while making an API call](/iam/api-cli/using-api-key-object-storage/#overriding-the-preferred-project-when-making-a-call)
+3. Make sure that the API key's [preferred Project](/iam/concepts/#preferred-project) is the same as the one where you are performing actions. You can change the preferred project of your API key:
+    - by editing it from the [Scaleway console](/iam/how-to/manage-api-keys/#how-to-edit-an-api-key)
+    - by [overriding it while making an API call](/iam/api-cli/using-api-key-object-storage/#overriding-the-preferred-project-when-making-a-call)
+4. Make sure that there is no [bucket policy](/object-storage/concepts/#bucket-policy) preventing the action. If there is one, [update the bucket policy](/object-storage/how-to/create-bucket-policy/) to allow the desired actions to the bearer of the API key.
 
 You should now be able to list your buckets using a supported Amazon Amazon S3-compatible third-party tool.
 
 ## Going further
 
 - Refer to the documentation on [using IAM API keys with Object Storage](/iam/api-cli/using-api-key-object-storage/) for more information.
 
+- Refer to the documentation on [bucket policies](/object-storage/api-cli/bucket-policy/) for more information.
+
 - If you did not manage to identify the error and solve it by yourself, [open a support ticket](/account/how-to/open-a-support-ticket/), and provide as many details as possible, along with the necessary information below:
     - Object Storage Endpoint (e.g. `s3.fr-par.scw.cloud`)
     - Bucket name