From 4675eed2e2fb104b6d013a788ff8eef76299ffc8 Mon Sep 17 00:00:00 2001
From: Steven Welch <steven@makeitwork.cloud>
Date: Fri, 4 Sep 2026 12:44:35 -0600
Subject: [PATCH] fix: allow channel site bucket discovery

---
 aws-github-oidc.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/aws-github-oidc.tf b/aws-github-oidc.tf
index 2988e7b..a04ba52 100644
--- a/aws-github-oidc.tf
+++ b/aws-github-oidc.tf
@@ -234,6 +234,7 @@ resource "aws_iam_role_policy" "github_actions_channel_project_site_infrastructu
           "s3:GetBucketPublicAccessBlock",
           "s3:GetBucketTagging",
           "s3:GetBucketVersioning",
+          "s3:ListBucket",
           "s3:PutBucketAcl",
           "s3:PutBucketEncryption",
           "s3:PutBucketLifecycleConfiguration",