From a1be9c5ba53102b04389bed283d9ce94dc3f568e Mon Sep 17 00:00:00 2001
From: Daniel Harvey <daniel@harves.net>
Date: Sat, 13 Dec 2025 17:19:50 +0800
Subject: [PATCH] Add SSM permissions for tagging resources

---
 www/src/content/docs/docs/iam-credentials.mdx | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/www/src/content/docs/docs/iam-credentials.mdx b/www/src/content/docs/docs/iam-credentials.mdx
index 15d3ea3b0c..2fa0f28d83 100644
--- a/www/src/content/docs/docs/iam-credentials.mdx
+++ b/www/src/content/docs/docs/iam-credentials.mdx
@@ -215,7 +215,9 @@ Let's start with an IAM policy you can _copy and paste_.
               "ssm:GetParameter",
               "ssm:GetParameters",
               "ssm:GetParametersByPath",
-              "ssm:PutParameter"
+              "ssm:PutParameter",
+              "ssm:AddTagsToResource",
+              "ssm:ListTagsForResource"
           ],
           "Resource": [
               "arn:aws:ssm:REGION:ACCOUNT:parameter/sst/*"