Unfortunately, you may run into a connection issue when trying to add an S3 bucket to your DeployHQ project. You will more than likely see the generic error:

```
Access Denied
```

A common cause of this is an incorrectly set policy. As a minimum, DeployHQ requires the following policy to be set:

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:DeleteObject",
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::bucket-name",
                "arn:aws:s3:::bucket-name/*"
            ]
        }
    ]
}
```

Just replace `bucket-name` in the Resource array to match the name of your bucket, and the ID of your policy which you can find [here](https://console.aws.amazon.com/billing/home?#/account).