diff --git a/src/main/resources/iam-policy.json b/src/main/resources/iam-policy.json
index 15104d7..92d1d78 100644
--- a/src/main/resources/iam-policy.json
+++ b/src/main/resources/iam-policy.json
@@ -43,6 +43,7 @@
         "iam:PassRole",
         "iam:PutRolePolicy",
         "iam:RemoveRoleFromInstanceProfile",
+        "iam:TagRole",
         "s3:CreateBucket",
         "s3:DeleteBucket",
         "s3:DeleteObject",