diff --git a/modules/hcp-aws-create-role-sts-creds.adoc b/modules/hcp-aws-create-role-sts-creds.adoc
index f1b9246ff97e..9f9154ab2e7d 100644
--- a/modules/hcp-aws-create-role-sts-creds.adoc
+++ b/modules/hcp-aws-create-role-sts-creds.adoc
@@ -156,6 +156,7 @@ arn:aws:iam::820196288204:role/myrole
             "Action": [
                 "iam:CreateInstanceProfile",
                 "iam:DeleteInstanceProfile",
+                "iam:TagInstanceProfile",
                 "iam:GetRole",
                 "iam:UpdateAssumeRolePolicy",
                 "iam:GetInstanceProfile",
@@ -166,11 +167,15 @@ arn:aws:iam::820196288204:role/myrole
                 "iam:PutRolePolicy",
                 "iam:AddRoleToInstanceProfile",
                 "iam:CreateOpenIDConnectProvider",
+                "iam:TagOpenIDConnectProvider",
                 "iam:ListOpenIDConnectProviders",
                 "iam:DeleteRolePolicy",
                 "iam:UpdateRole",
                 "iam:DeleteOpenIDConnectProvider",
-                "iam:GetRolePolicy"
+                "iam:GetRolePolicy",
+                "iam:ListAttachedRolePolicies",
+                "iam:ListRolePolicies",
+                "iam:DetachRolePolicy"
             ],
             "Resource": "*"
         },