From a8d89dc2863e7c0e9791d3190cb8c3d64ddfe980 Mon Sep 17 00:00:00 2001
From: Jun-te Kim <junte.kim@mealcraft.com>
Date: Tue, 10 Feb 2026 19:12:34 +0000
Subject: [PATCH] s3 policy

---
 infrastructure/terraform/shared/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/infrastructure/terraform/shared/main.tf b/infrastructure/terraform/shared/main.tf
index 5e189dc9..83845185 100644
--- a/infrastructure/terraform/shared/main.tf
+++ b/infrastructure/terraform/shared/main.tf
@@ -366,7 +366,7 @@ module "postcode_splitter_s3_read" {
   policy_name        = "PostcodeSplitterReadS3"
   policy_description = "Allow postcode splitter Lambda to read from retrofit-data bucket"
   bucket_arns        = ["arn:aws:s3:::retrofit-data-${var.stage}"]
-  actions            = ["s3:GetObject"]
+  actions            = ["s3:GetObject", "s3:ListBucket"]
   resource_paths     = ["/*"]
 }