diff --git a/aws-github-oidc.tf b/aws-github-oidc.tf
index a04ba52..941fe4d 100644
--- a/aws-github-oidc.tf
+++ b/aws-github-oidc.tf
@@ -225,15 +225,22 @@ resource "aws_iam_role_policy" "github_actions_channel_project_site_infrastructu
         Action = [
           "s3:DeleteBucket",
           "s3:DeleteBucketPolicy",
+          "s3:GetBucketAccelerateConfiguration",
           "s3:GetBucketAcl",
+          "s3:GetBucketCors",
           "s3:GetBucketEncryption",
           "s3:GetBucketLifecycleConfiguration",
           "s3:GetBucketLocation",
+          "s3:GetBucketLogging",
+          "s3:GetBucketObjectLockConfiguration",
           "s3:GetBucketOwnershipControls",
           "s3:GetBucketPolicy",
           "s3:GetBucketPublicAccessBlock",
+          "s3:GetBucketReplication",
+          "s3:GetBucketRequestPayment",
           "s3:GetBucketTagging",
           "s3:GetBucketVersioning",
+          "s3:GetBucketWebsite",
           "s3:ListBucket",
           "s3:PutBucketAcl",
           "s3:PutBucketEncryption",