diff --git a/src/content/docs/r2/data-migration/sippy.mdx b/src/content/docs/r2/data-migration/sippy.mdx
index 51fdae0f28db86..6e8babcb5f01f8 100644
--- a/src/content/docs/r2/data-migration/sippy.mdx
+++ b/src/content/docs/r2/data-migration/sippy.mdx
@@ -245,8 +245,8 @@ To create credentials with the correct permissions:
 	"Statement": [
 		{
 			"Effect": "Allow",
-			"Action": ["s3:Get*", "s3:List*"],
-			"Resource": ["arn:aws:s3:::<BUCKET_NAME>", "arn:aws:s3:::<BUCKET_NAME>/*"]
+			"Action": ["s3:GetObject"],
+			"Resource": ["arn:aws:s3:::<BucketName>/*"]
 		}
 	]
 }