A developer is attempting to access an Amazon S3 bucket in a member account in AWS Organizations. The developer is logged in to the account with user credentials and has received an access denied error with no bucket listed. The developer should have read-only access to all buckets in the account. A security engineer has reviewed the permissions and found that the developer's IAM user has been granted read-only access to all S3 buckets in the account. Which additional steps should the security engineer take to troubleshoot the issue? (Select TWO.)