diff --git a/.github/workflows/config.yml b/.github/workflows/config.yml
index 59fb4b7..743a3ed 100644
--- a/.github/workflows/config.yml
+++ b/.github/workflows/config.yml
@@ -26,5 +26,6 @@ jobs:
       - name: Deploy infrastructure.yml
         run: |
           sam deploy --stack-name code-runner-infrastructure \
-            --template infrastructure.yml
+            --template infrastructure.yml \
             --no-fail-on-empty-changeset
+
diff --git a/ops.yml b/ops.yml
index 9885391..c333cf6 100644
--- a/ops.yml
+++ b/ops.yml
@@ -52,9 +52,10 @@ Resources:
             Action:
               - "cloudformation:CreateChangeSet"
               - "cloudformation:DescribeChangeSet"
-              - "cloudformation:ExecuteChangeSet"
               - "cloudformation:DescribeStackEvents"
               - "cloudformation:DescribeStacks"
+              - "cloudformation:ExecuteChangeSet"
+              - "cloudformation:GetTemplateSummary"
               - "ecr:CreateRepository"
               - "ecr:DeleteRepository"
               - "ecr:SetRepositoryPolicy"