diff --git a/lib/terraform-substrate/terraform-substrate.template.yaml b/lib/terraform-substrate/terraform-substrate.template.yaml
index 049e394..0a23769 100644
--- a/lib/terraform-substrate/terraform-substrate.template.yaml
+++ b/lib/terraform-substrate/terraform-substrate.template.yaml
@@ -3589,38 +3589,22 @@ Resources:
                   - autoscaling:ResumeProcesses
                   - autoscaling:SuspendProcesses
                 Resource: arn:aws:autoscaling:us-east-1:396287094661:autoScalingGroup:*:autoScalingGroupName/awseb-e-6c9m4vb62z-stack-*
-              - Sid: UseStagingBeanstalkBucket
+              - Sid: StagingBeanstalkObjects
                 Effect: Allow
                 Action:
-                  - s3:GetBucketLocation
+                  - s3:Delete*
+                  - s3:Get*
+                  - s3:Put*
+                Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/*
+              - Sid: StagingBeanstalkBuckets
+                Effect: Allow
+                Action:
+                  - s3:GetBucket*
                   - s3:ListBucket
-                  - s3:GetBucketPolicy
-                  - s3:GetBucketAcl
-                  - s3:GetBucketVersioning
-                  - s3:GetBucketOwnershipControls
+                  - s3:PutBucketOwnershipControls
+                  - s3:PutBucketPolicy
+                  - s3:PutBucketPublicAccessBlock
                 Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
-              - Sid: ReadStagingReleaseZips
-                Effect: Allow
-                Action:
-                  - s3:GetObject
-                  - s3:GetObjectAcl
-                  - s3:GetObjectVersion
-                  - s3:GetObjectVersionAcl
-                Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/releases/staging/*
-              - Sid: ManageStagingEnvironmentObjects
-                Effect: Allow
-                Action:
-                  - s3:PutObject
-                  - s3:PutObjectAcl
-                  - s3:PutObjectVersionAcl
-                  - s3:GetObject
-                  - s3:GetObjectAcl
-                  - s3:GetObjectVersion
-                  - s3:GetObjectVersionAcl
-                  - s3:DeleteObject
-                Resource:
-                  - arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*
-                  - arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/_runtime/_embedded_extensions/shoc-backend/*
               - Sid: PutStagingRuntimePolicy
                 Effect: Allow
                 Action: iam:PutRolePolicy