From f8dfc4e143605926ac61edef044f45c486fa00c2 Mon Sep 17 00:00:00 2001
From: Cory <murribu@gmail.com>
Date: Thu, 11 Jan 2024 16:45:56 -0600
Subject: [PATCH] Update petpics2_policy.json

The policy needs to allow the bucket to see the ownership controls or else the upload will fail. See [this forum post](https://repost.aws/questions/QU5KfnbV5FQi6AYgDDhNcaFg/s3-upload-issues-through-the-aws-console#ANgntEg3GuQrmOt276IKlY1A) for more context.
---
 .../01_DEMOSETUP/petpics2_policy.json                          | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/03-AdvancedPermissionsAndAccounts/04_Cross-AccountPermissions/01_DEMOSETUP/petpics2_policy.json b/03-AdvancedPermissionsAndAccounts/04_Cross-AccountPermissions/01_DEMOSETUP/petpics2_policy.json
index 69a3ab0..400264b 100644
--- a/03-AdvancedPermissionsAndAccounts/04_Cross-AccountPermissions/01_DEMOSETUP/petpics2_policy.json
+++ b/03-AdvancedPermissionsAndAccounts/04_Cross-AccountPermissions/01_DEMOSETUP/petpics2_policy.json
@@ -10,7 +10,8 @@
               "s3:GetObject",
               "s3:PutObject",
               "s3:PutObjectAcl",
-              "s3:ListBucket"
+              "s3:ListBucket",
+              "s3:GetBucketOwnershipControls"
           ],
           "Resource": [
               "arn:aws:s3:::REPLACEME_BUCKETNAME/*",