diff --git a/terraform/deployments/tfc-aws-config/main.tf b/terraform/deployments/tfc-aws-config/main.tf
index 5c551daae..46b04359a 100644
--- a/terraform/deployments/tfc-aws-config/main.tf
+++ b/terraform/deployments/tfc-aws-config/main.tf
@@ -88,7 +88,10 @@ data "aws_iam_policy_document" "tfc_policy" {
     condition {
       test     = "StringEquals"
       variable = "iam:PassedToService"
-      values   = ["eks.amazonaws.com"]
+      values = [
+        "eks.amazonaws.com",
+        "s3.amazonaws.com"
+      ]
     }
   }
   statement {