diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index cc01dc4..760858a 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -292,8 +292,11 @@ data "aws_iam_policy_document" "deploy" {
   dynamic "statement" {
     for_each = local.use_legacy_s3_policy ? [] : [1]
     content {
-      effect    = "Allow"
-      actions   = ["s3:PutObject"]
+      effect = "Allow"
+      actions = [
+        "s3:PutObject",
+        "s3:GetObject",
+      ]
       resources = ["arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*"]
     }
   }