When you're using the Include, Cloudformation tries to access the file. So it's mostly a permission with that role. Are you sure that the specified cloudformation role has access to that bucket? And there's no additional bucket ACL or policy issue?