diff --git a/template.yaml b/template.yaml
index a6307b5..172e603 100644
--- a/template.yaml
+++ b/template.yaml
@@ -21,6 +21,7 @@ Globals:
     MemorySize: 1024
     Architectures:
       - arm64
+    PermissionsBoundary: arn:aws:iam::328440206208:policy/seahaven-lambda-execution-boundary
   # Access logging + default throttling on the implicit HTTP API (audit M-18).
   HttpApi:
     AccessLogSettings: