diff --git a/templates/dev/bootstrap/index.js b/templates/dev/bootstrap/index.js
index 9a6382068..cfe3e80c3 100644
--- a/templates/dev/bootstrap/index.js
+++ b/templates/dev/bootstrap/index.js
@@ -87,8 +87,11 @@ module.exports = {
           "Version": "2012-10-17",
           "Statement": [
             {
+              "Sid": "CFNLambdaS3Access",
               "Effect": "Allow",
               "Action": [
+                "s3:ListBucketVersions",
+                "s3:PutBucketNotification",
                 "s3:PutObject",
                 "s3:GetObject",
                 "s3:GetObjectVersion",
diff --git a/templates/dev/bucket.js b/templates/dev/bucket.js
index 1071041d0..370d18699 100644
--- a/templates/dev/bucket.js
+++ b/templates/dev/bucket.js
@@ -89,8 +89,11 @@ module.exports = outputs('dev/bootstrap')
               "Version": "2012-10-17",
               "Statement": [
                 {
+                  "Sid": "CFNLambdaS3Access",
                   "Effect": "Allow",
                   "Action": [
+                    "s3:ListBucketVersions",
+                    "s3:PutBucketNotification",
                     "s3:PutObject",
                     "s3:GetObject",
                     "s3:DeleteObjectVersion",
diff --git a/templates/master/roles.json b/templates/master/roles.json
index e9d006d7a..d6fbb7444 100644
--- a/templates/master/roles.json
+++ b/templates/master/roles.json
@@ -271,8 +271,11 @@
                   "Resource": ["*"]
                 },
                 {
+                  "Sid": "CFNLambdaS3Access",
                   "Effect": "Allow",
                   "Action": [
+                    "s3:ListBucketVersions",
+                    "s3:PutBucketNotification",
                     "s3:PutObject",
                     "s3:GetObject",
                     "s3:DeleteObjectVersion",