diff --git a/cfn/S3EC-GitHub-CF-Template.yml b/cfn/S3EC-GitHub-CF-Template.yml
index 0436f3175..dbc67a3b2 100644
--- a/cfn/S3EC-GitHub-CF-Template.yml
+++ b/cfn/S3EC-GitHub-CF-Template.yml
@@ -86,6 +86,7 @@ Resources:
               - 's3:PutObject'
               - 's3:GetObject'
               - 's3:DeleteObject'
+              - 's3:HeadObject'
             Resource:
               - !Join [ "", [ !GetAtt S3ECGitHubTestS3Bucket.Arn, '/*'] ]
 
@@ -116,6 +117,7 @@ Resources:
               - 's3:PutObject'
               - 's3:GetObject'
               - 's3:DeleteObject'
+              - 's3:HeadObject'
             Resource:
               - !Join [ "", [ !GetAtt S3ECGitHubTestS3BucketAlternate.Arn, '/*'] ]
 
@@ -146,6 +148,7 @@ Resources:
               - 's3:PutObject'
               - 's3:GetObject'
               - 's3:DeleteObject'
+              - 's3:HeadObject'
             Resource:
               - !Join [ "", [ !GetAtt S3ECGitHubTestS3BucketTestVectors.Arn, '/*'] ]