Currently there is the option for spaces access keys to either be fullaccess or read/write/delete scoped on one or several buckets. An access key which has read on a bucket still can't do something like "s3cmd info s3://<bucket-name>". Ideally there is something like a fullread key that allows reading all the information in Spaces.