diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index 09b1f88..9303f8b 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -296,6 +296,7 @@ data "aws_iam_policy_document" "deploy" {
       actions = [
         "s3:PutObject",
         "s3:PutObjectAcl",
+        "s3:PutObjectVersionAcl",
         "s3:GetObject",
         "s3:GetObjectAcl",
         "s3:GetObjectVersion",