SES receiving rule set can write to S3 bucket, but sends AMAZON_SES_SETUP_NOTIFICATION AccessDenied file

I created an S3 bucket named klein-email, and set the following bucket policy as directed.

{
    "Version": "2008-10-17",
    "Statement": [
        {
            "Sid": "GiveSESPermissionToWriteEmail",
            "Effect": "Allow",
            "Principal": {
                "Service": "ses.amazonaws.com"
            },
            "Action": "s3:PutObject",
            "Resource": "a:aws:s3:::klein-email/*",
            "Condition": {
                "StringEquals": {
                    "aws:Referer": "<MY 12 digit AWS Account ID without dashes>"
                }
            }
        }
    ]
}

I then created the following Email Receiving Rule Set in SES:

As soon as I clicked "Save Rule" it showed up as Enabled:

But when I look in the klein-email bucket, there is a single file named AMAZON_SES_SETUP_NOTIFICATION with contents:

<Error>
<Code>AccessDenied</Code>
<Message>Access Denied</Message>
<RequestId>D53830BAA763FAF4</RequestId>
<HostId>
NpS1RlWJbXfcomjOzZ+AZBGC8Rnw2hnrLstkH+wvZXY1Bhmc6DyzC2sjJYmqIoOw6QQVnj/4BFU=
</HostId>
</Error>

In an effort to get some more information as to what is happening, I enabled logs on the bucket, but nothing is getting logged. Emails to the specified email address get bounced with message 550 5.1.1 Requested action not taken: mailbox unavailable.

I have verified my ownership of the coryklein.com domain.

Recent Questions...