diff --git a/modules/aws/vendor-access/files/provision1.json.tpl b/modules/aws/vendor-access/files/provision1.json.tpl
index f3feca9..8bc7c94 100644
--- a/modules/aws/vendor-access/files/provision1.json.tpl
+++ b/modules/aws/vendor-access/files/provision1.json.tpl
@@ -44,6 +44,7 @@
         "ec2:ReplaceRouteTableAssociation",
         "ec2:CreateSubnet",
         "ec2:CreateVpcEndpoint",
+        "vpce:AllowMultiRegion",
         "ec2:DescribeVpcPeeringConnections",
         "ec2:CreateVpcPeeringConnection",
         "ec2:DeleteVpcPeeringConnection"