diff --git a/apps/gateway/src/main.rs b/apps/gateway/src/main.rs
index 5b970a9..307f3e7 100644
--- a/apps/gateway/src/main.rs
+++ b/apps/gateway/src/main.rs
@@ -81,6 +81,11 @@ impl Services {
             || path.starts_with("/api/kb")
             || path.starts_with("/api/packages")
             || path.starts_with("/api/support")
+            || path.starts_with("/api/admin/roles")
+            || path.starts_with("/api/admin/external-roles")
+            || path.starts_with("/api/admin/dashboard-config")
+            || path.starts_with("/api/admin/onboarding-config")
+            || path.starts_with("/api/admin/dashboard")
             || path.starts_with("/api/admin/kb")
             || path.starts_with("/api/admin/support-cases")
             || path.starts_with("/api/admin/reviews")
diff --git a/crates/storage/src/lib.rs b/crates/storage/src/lib.rs
index 63ccbc8..09b9630 100644
--- a/crates/storage/src/lib.rs
+++ b/crates/storage/src/lib.rs
@@ -11,7 +11,7 @@
 //!   B2_USE_PATH_STYLE  — true/false (default true)
 
 use anyhow::{Context, Result};
-use aws_config::Region;
+use aws_config::{BehaviorVersion, Region};
 use aws_credential_types::Credentials;
 use aws_sdk_s3::Client;
 use aws_sdk_s3::config::{Builder as S3ConfigBuilder, SharedCredentialsProvider};
@@ -54,6 +54,7 @@ impl StorageClient {
         let public_base_url = format!("https://{}/{}", endpoint, bucket);
 
         let s3_config = S3ConfigBuilder::new()
+            .behavior_version(BehaviorVersion::latest())
             .endpoint_url(endpoint_url)
             .region(Region::new(region))
             .credentials_provider(SharedCredentialsProvider::new(creds))