diff --git a/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json b/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
index 3d35d8f29e..1507553414 100644
--- a/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
+++ b/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
@@ -75,6 +75,7 @@
       "Action": [
         "elasticloadbalancing:DeleteListener",
         "elasticloadbalancing:RegisterTargets",
+        "elasticloadbalancing:DeregisterTargets",
         "elasticloadbalancing:ModifyTargetGroup",
         "elasticloadbalancing:DeleteTargetGroup",
         "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",