Circle CI deploy-to-aws-s3-with-2-configuration not picking up doppler credentials

CircleCI version 2.0 allows for using AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as variables for AWS CLI credentials.

CircleCI does not accept these credentials from Doppler Service Token access when executing
aws s3 sync dist s3://[url] --region us-west-2

CircleCI will error with fatal error: Unable to locate credentials.

I was only able to get it to work by adding AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY directly to the CircleCI Environment Variables.

Is this a bug or am I missing something?

So now that I more fully understand how Doppler works, changing my question:

What is the best way to wrap the aws deploy statement in a doppler run command, so that my AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are available for authentication?