diff --git a/infra/setup/iam.tf b/infra/setup/iam.tf
index 8a450bf..460bd78 100644
--- a/infra/setup/iam.tf
+++ b/infra/setup/iam.tf
@@ -160,7 +160,8 @@ data "aws_iam_policy_document" "rds" {
       "rds:CreateDBInstance",
       "rds:DeleteDBInstance",
       "rds:ListTagsForResource",
-      "rds:ModifyDBInstance"
+      "rds:ModifyDBInstance",
+      "rds:AddTagsToResource"
     ]
     resources = ["*"]
   }