diff --git a/www/src/content/docs/docs/iam-credentials.mdx b/www/src/content/docs/docs/iam-credentials.mdx
index 15d3ea3b0c..2fa0f28d83 100644
--- a/www/src/content/docs/docs/iam-credentials.mdx
+++ b/www/src/content/docs/docs/iam-credentials.mdx
@@ -215,7 +215,9 @@ Let's start with an IAM policy you can _copy and paste_.
               "ssm:GetParameter",
               "ssm:GetParameters",
               "ssm:GetParametersByPath",
-              "ssm:PutParameter"
+              "ssm:PutParameter",
+              "ssm:AddTagsToResource",
+              "ssm:ListTagsForResource"
           ],
           "Resource": [
               "arn:aws:ssm:REGION:ACCOUNT:parameter/sst/*"