diff --git a/packages/serverless-deploy-iam/bin/app.ts b/packages/serverless-deploy-iam/bin/app.ts
old mode 100644
new mode 100755
index e126faf..16d82ec
--- a/packages/serverless-deploy-iam/bin/app.ts
+++ b/packages/serverless-deploy-iam/bin/app.ts
@@ -166,6 +166,7 @@ export class ServiceDeployIAM extends cdk.Stack {
             "iam:GetRole",
             "iam:DeleteRole",
             "iam:UpdateRole",
+            "iam:TagRole",
             "iam:GetRolePolicy",
             "iam:DeleteRolePolicy",
             "iam:PutRolePolicy",