Dana has a profile and no permissions. Try the bucket as her and read the error:
sh
aws s3 ls s3://reports-1xp95rx --profile danaA policy is drafted in ~/reports-read.json. Read it, check the two Resource lines, then create and attach it:
sh
aws iam create-policy --policy-name ReportsRead --policy-document file://reports-read.json
aws iam attach-user-policy --user-name dana --policy-arn arn:aws:iam::123456789012:policy/ReportsRead
aws s3 ls s3://reports-1xp95rx --profile dana
aws s3 cp s3://reports-1xp95rx/q3.txt - --profile dana
aws s3 cp reports-read.json s3://reports-1xp95rx/x.json --profile dana