403 Forbidden

[hornetmadness]

running the below gives the error, but putting the key and secret in the cli works fine.
boto-rsync --access-key /etc/awsapi-key --secret-key /etc/awsapi-key --glob /var/log/nginx/access.log s3://nginx-access-logs/

I used the example in the boto config link
[Credentials]
aws_access_key_id =
aws_secret_access_key =

Any thoughts? I'm at a loss as to the why.

I'm not sure. You may be reading the config doc wrong. Put both the access key and secret key in the config file, and put that either in /etc/boto.cfg or ~/.boto. You shouldn't need to specify a path to the config file then.