diff --git a/modules/setup-iam-permissions/policies/deploy-boundary.json b/modules/setup-iam-permissions/policies/deploy-boundary.json
index e6111e5f19..bb93622e8a 100644
--- a/modules/setup-iam-permissions/policies/deploy-boundary.json
+++ b/modules/setup-iam-permissions/policies/deploy-boundary.json
@@ -52,7 +52,8 @@
         "iam:RemoveRoleFromInstanceProfile",
         "iam:DeleteInstanceProfile",
         "iam:AddRoleToInstanceProfile",
-        "iam:GetInstanceProfile"
+        "iam:GetInstanceProfile",
+        "iam:TagInstanceProfile"
       ],
       "Resource": "arn:${aws_partition}:iam::${account_id}:instance-profile/${instance_profile_namespace}/*"
     },