diff --git a/iam.tf b/iam.tf
index d2a32b7..0a629a5 100644
--- a/iam.tf
+++ b/iam.tf
@@ -54,6 +54,7 @@ data "aws_iam_policy_document" "policy" {
       "s3:GetObject",
       "s3:DeleteObject",
       "s3:PutObject",
+      "s3:PutObjectTagging",
       "s3:AbortMultipartUpload",
       "s3:ListMultipartUploadParts"
     ]