diff --git a/.github/workflows/dashboard-build-and-deploy.yml b/.github/workflows/dashboard-build-and-deploy.yml
index 679ccc18..d4078cc4 100644
--- a/.github/workflows/dashboard-build-and-deploy.yml
+++ b/.github/workflows/dashboard-build-and-deploy.yml
@@ -92,12 +92,11 @@ jobs:
     uses: NHSDigital/gp2gp-reporting-infrastructure/.github/workflows/deploy-stack.yml@v3
     with:
       environment: ${{ inputs.environment }}
-      is_deployment: ${{ github.ref == 'refs/heads/main' }}
+      is_deployment: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
       terraform_stack: gp2gp_dashboard
       image_tag: gp2gp-dashboard
       hyphenated_alias: gp2gp-dashboard
       build_lambda: true
-      git_ref: ${{ github.ref }}
     secrets: inherit
 
   redeploy_gp2gp_infrastructure_step_functions:
@@ -106,8 +105,7 @@ jobs:
     uses: NHSDigital/gp2gp-reporting-infrastructure/.github/workflows/deploy-stack.yml@v3
     with:
       environment: ${{ inputs.environment }}
-      is_deployment: ${{ github.ref == 'refs/heads/main' }}
+      is_deployment: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
       terraform_stack: step_function
       hyphenated_alias: step-function
-      git_ref: ${{ github.ref }}
     secrets: inherit
\ No newline at end of file
diff --git a/dashboard/gatsby-config.js b/dashboard/gatsby-config.js
index 007466cc..71f70e5d 100644
--- a/dashboard/gatsby-config.js
+++ b/dashboard/gatsby-config.js
@@ -6,7 +6,7 @@ module.exports = {
         bucketName: `${process.env.DEPLOYMENT_BUCKET}`,
         region: "eu-west-2",
         parallelLimit: 1000,
-        acl: "public-read",
+        acl: "bucket-owner-full-control",
       },
     },
     {