diff --git a/modules/installation-aws-permissions.adoc b/modules/installation-aws-permissions.adoc
index 156e80faddef..c75c5f6e47d7 100644
--- a/modules/installation-aws-permissions.adoc
+++ b/modules/installation-aws-permissions.adoc
@@ -272,8 +272,6 @@ If you use an existing VPC, your account does not require these permissions to d
 * `iam:ListAccessKeys`
 * `iam:PutUserPolicy`
 * `iam:TagUser`
-* `iam:GetUserPolicy`
-* `iam:ListAccessKeys`
 * `s3:PutBucketPublicAccessBlock`
 * `s3:GetBucketPublicAccessBlock`
 * `s3:PutLifecycleConfiguration`