diff --git a/docs/content/s3.md b/docs/content/s3.md
index 5e600562d..a65138e94 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -258,6 +258,7 @@ permissions are required to be available on the bucket being written to:
 
 * `ListBucket`
 * `DeleteObject`
+* `GetObject`
 * `PutObject`
 * `PutObjectACL`
 
@@ -275,6 +276,7 @@ Example policy:
             "Action": [
                 "s3:ListBucket",
                 "s3:DeleteObject",
+                "s3:GetObject",
                 "s3:PutObject",
                 "s3:PutObjectAcl"
             ],