Bento references some files in the aws-preprod account, management requested that they be moved to production as its odd for us to serve things publicly out of the preprod account.  Corp ticket PROD-300.  As part of this a new IAM account opscode-bento-uploader was created within the aws-production account, but its access it limited to the s3://opscode-vm-bento bucket.  These credentials are in the 'Dev/Consulting/Support AWS' folder in teampass.