diff --git a/terraform/modules/dandiset_bucket/main.tf b/terraform/modules/dandiset_bucket/main.tf
index 10d69cb..3a2b2c7 100644
--- a/terraform/modules/dandiset_bucket/main.tf
+++ b/terraform/modules/dandiset_bucket/main.tf
@@ -116,7 +116,7 @@ data "aws_iam_policy_document" "dandiset_bucket_owner" {
         "${aws_s3_bucket.dandiset_bucket.arn}/*",
       ]
 
-      actions = ["s3:PutObject"]
+      actions = ["s3:PutObject", "s3:PutObjectTagging"]
     }
   }