diff --git a/CHANGELOG.md b/CHANGELOG.md
index f8fe57a..f4c6206 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [6.4.3] - 2020-08-12
+### Fixed
+- [Issue 169](https://github.com/ExpediaGroup/apiary-data-lake/issues/169) Added S3:GetBucketAcl to cross-account shared buckets
+
 ## [6.4.2] - 2020-08-04
 ### Fixed
 - Variable to disable metastore VPC endpoint services.
diff --git a/templates/apiary-bucket-policy.json b/templates/apiary-bucket-policy.json
index a16d56a..12bf2ea 100644
--- a/templates/apiary-bucket-policy.json
+++ b/templates/apiary-bucket-policy.json
@@ -12,6 +12,8 @@
             "Action": [
                 "s3:GetBucketLocation",
                 "s3:GetObject",
+                "s3:GetObjectAcl",
+                "s3:GetBucketAcl",
                 "s3:ListBucket"
             ],
             "Resource": [
@@ -44,6 +46,8 @@
             "Action": [
                 "s3:GetBucketLocation",
                 "s3:GetObject",
+                "s3:GetObjectAcl",
+                "s3:GetBucketAcl",
                 "s3:ListBucket",
                 "s3:PutObject",
                 "s3:PutObjectAcl",