From 71862837dd2a068f94db7348974db384b9930f29 Mon Sep 17 00:00:00 2001
From: Darwin Chowdary <39110935+imabhichow@users.noreply.github.com>
Date: Mon, 10 Nov 2025 14:07:03 -0800
Subject: [PATCH] chore: Add 's3:HeadObject' action to S3 bucket policy

---
 cdk/lib/cdk-stack.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cdk/lib/cdk-stack.ts b/cdk/lib/cdk-stack.ts
index a56d6b26..1fad4b74 100644
--- a/cdk/lib/cdk-stack.ts
+++ b/cdk/lib/cdk-stack.ts
@@ -101,6 +101,7 @@ export class S3ECPythonGithub extends cdk.Stack {
             new PolicyStatement({
               effect: Effect.ALLOW,
               actions: [
+                "s3:HeadObject", // Only get object metadata
                 "s3:PutObject",
                 "s3:GetObject",
                 "s3:DeleteObject",