diff --git a/terraform/modules/rds-snapshot-to-s3/iam.tf b/terraform/modules/rds-snapshot-to-s3/iam.tf
index c77db0b4c..98b1b0514 100644
--- a/terraform/modules/rds-snapshot-to-s3/iam.tf
+++ b/terraform/modules/rds-snapshot-to-s3/iam.tf
@@ -119,7 +119,7 @@ data "aws_iam_policy_document" "rds_snapshot_to_s3_lambda" {
   }
 
   statement {
-    sid = "AllowKMSDecrypt"
+    sid = "AllowKMSAccess"
     actions = [
       "kms:Encrypt",
       "kms:GenerateDataKey",