Fix the hierarchy for base vs. s3 conns.
Better implementation of get_container that doesn't call list_containers under the hood.

This will behave correctly with restricted IAM permissions.