diff --git a/templates/S3/synapse-external-bucket.j2 b/templates/S3/synapse-external-bucket.j2
index f09823c..c01671f 100644
--- a/templates/S3/synapse-external-bucket.j2
+++ b/templates/S3/synapse-external-bucket.j2
@@ -137,6 +137,7 @@ Resources:
               AWS: !Ref GrantAccess
             Action:
               - "s3:GetObject"
+              - "s3:GetObjectTagging"
               - "s3:GetObjectAcl"
               - "s3:ListMultipartUploadParts"
               - "s3:GetObjectAttributes"
@@ -150,6 +151,7 @@ Resources:
                 AWS: !Ref GrantAccess
               Action:
                 - "s3:PutObject"
+                - "s3:PutObjectTagging"
                 - "s3:PutObjectAcl"
                 - "s3:DeleteObject*"
                 - "s3:*MultipartUpload*"