diff --git a/ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh b/ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh
index 35d7ab9d13bd5..913ba1258eb39 100644
--- a/ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh
+++ b/ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh
@@ -117,6 +117,7 @@ ec2:CreateRoute
 ec2:CreateRouteTable
 ec2:CreateSecurityGroup
 ec2:CreateSubnet
+ec2:CreateSnapshot
 ec2:CreateTags
 ec2:CreateVolume
 ec2:CreateVpc
@@ -154,6 +155,7 @@ ec2:DescribePrefixLists
 ec2:DescribeRegions
 ec2:DescribeRouteTables
 ec2:DescribeSecurityGroups
+ec2:DescribeSnapshots
 ec2:DescribeSubnets
 ec2:DescribeTags
 ec2:DescribeVolumes