WAF Override API with API token

Does the WAF Override API work with API token?

I’m executing

$ curl -X GET \                  
     -H "Authorization: Bearer `cat ~/.cloudflare-token`" 
"https://api.cloudflare.com/client/v4/zones/${ZONE}/firewall/waf/overrides"
{"success":false,"errors":[{"code":10000,"message":"Authentication error"}]}

Rulesets API works with the same token. I believe I have added all required permissions.
Is there any page that lists which APIs work with either API token / key?

Received response from support:

Currently the API Token is not supported for calling the WAF Overrides API endpoint. We have internal tickets to track this but currently there is no ETA we can share yet.

Created an issue on the Terraform provider: https://github.com/cloudflare/terraform-provider-cloudflare/issues/1430