diff --git a/cloudformation/panther-deployment-role.yml b/cloudformation/panther-deployment-role.yml
index 9092ed3..d027696 100644
--- a/cloudformation/panther-deployment-role.yml
+++ b/cloudformation/panther-deployment-role.yml
@@ -310,6 +310,7 @@ Resources:
               - s3:CreateBucket
               - s3:DeleteBucket
               - s3:DeleteBucketPolicy
+              - s3:GetObject
               - s3:PutBucketAcl
               - s3:PutBucketCors
               - s3:PutBucketLogging