diff --git a/dev-aws/kafka-shared/iam.tf b/dev-aws/kafka-shared/iam.tf
index 6fd7d68a..ae222e3d 100644
--- a/dev-aws/kafka-shared/iam.tf
+++ b/dev-aws/kafka-shared/iam.tf
@@ -127,6 +127,7 @@ module "iam_jwks_publisher" {
 module "iam_identitydb_event_forwarder" {
   source           = "../../modules/tls-app"
   produce_topics   = [kafka_topic.iam_identitydb_v1.name]
+  consume_topics   = { (kafka_topic.iam_revoked_v1.name) : "iam-identitydb-event-forwarder" }
   cert_common_name = "auth/iam-identitydb-event-forwarder"
 }
 
diff --git a/prod-aws/kafka-shared/iam.tf b/prod-aws/kafka-shared/iam.tf
index c3e3bf00..c638c122 100644
--- a/prod-aws/kafka-shared/iam.tf
+++ b/prod-aws/kafka-shared/iam.tf
@@ -86,6 +86,7 @@ module "iam_jwks_publisher" {
 module "iam_identitydb_event_forwarder" {
   source           = "../../modules/tls-app"
   produce_topics   = [kafka_topic.iam_identitydb_v1.name]
+  consume_topics   = { (kafka_topic.iam_revoked_v1.name) : "iam-identitydb-event-forwarder" }
   cert_common_name = "auth/iam-identitydb-event-forwarder"
 }