diff --git a/stable/aws-vpc-cni/templates/clusterrole.yaml b/stable/aws-vpc-cni/templates/clusterrole.yaml
index 346eb1bb8..cb7c8eebc 100644
--- a/stable/aws-vpc-cni/templates/clusterrole.yaml
+++ b/stable/aws-vpc-cni/templates/clusterrole.yaml
@@ -36,7 +36,7 @@ rules:
   - apiGroups: ["networking.k8s.aws"]
     resources:
       - policyendpoints
-    verbs: ["get", "patch", "list", "watch"]
+    verbs: ["get", "list", "watch"]
   - apiGroups: ["networking.k8s.aws"]
     resources:
       - policyendpoints/status