diff --git a/main.tf b/main.tf
index b99d637..5ee4dc2 100644
--- a/main.tf
+++ b/main.tf
@@ -145,6 +145,7 @@ data "aws_iam_policy_document" "policy" {
   statement {
     actions = [
       "s3:GetBucketLocation",
+      "s3:GetBucketPolicy",
       "s3:ListBucket",
       "s3:ListBucketMultipartUploads",
       "s3:ListBucketVersions",