diff --git a/packages/serverless-deploy-iam/bin/app.ts b/packages/serverless-deploy-iam/bin/app.ts
index 20d1181..9805097 100755
--- a/packages/serverless-deploy-iam/bin/app.ts
+++ b/packages/serverless-deploy-iam/bin/app.ts
@@ -145,12 +145,9 @@ export class ServiceDeployIAM extends cdk.Stack {
           resources: [
             `arn:aws:lambda:${region}:${accountId}:event-source-mapping:*`,
           ],
-          actions: ["lambda:TagResource"],
-        },
-        {
-          name: "LAMBDA",
-          resources: [`*`],
           actions: [
+            "lambda:TagResource",
+            "lambda:UntagResource",
             "lambda:GetEventSourceMapping",
             "lambda:ListEventSourceMappings",
             "lambda:CreateEventSourceMapping",