diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
index b3263ac1..0610134e 100644
--- a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
+++ b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -553,7 +553,8 @@ resource "aws_iam_policy" "security_management" {
           "lambda:GetCodeSigningConfig",
           "lambda:ListCodeSigningConfigs",
           "lambda:GetFunctionCodeSigningConfig",
-          "lambda:ListTags"
+          "lambda:ListTags",
+          "lambda:TagResource",
         ],
         Resource = "*"
       },