diff --git a/src/main/resources/iam-policy.json b/src/main/resources/iam-policy.json
index 92e038a..92d1d78 100644
--- a/src/main/resources/iam-policy.json
+++ b/src/main/resources/iam-policy.json
@@ -43,11 +43,13 @@
         "iam:PassRole",
         "iam:PutRolePolicy",
         "iam:RemoveRoleFromInstanceProfile",
+        "iam:TagRole",
         "s3:CreateBucket",
         "s3:DeleteBucket",
         "s3:DeleteObject",
         "s3:GetObject",
         "s3:ListBucket",
+        "s3:PutBucketTagging",
         "s3:PutObject",
         "s3:GetBucketPolicy",
         "s3:PutBucketPolicy",