diff --git a/terraform/hcp_iam.tf b/terraform/hcp_iam.tf
index 3047199..5b3c2fe 100644
--- a/terraform/hcp_iam.tf
+++ b/terraform/hcp_iam.tf
@@ -199,6 +199,7 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
       "iam:ListAttachedRolePolicies",
       "iam:ListInstanceProfilesForRole",
       "iam:ListPolicies",
+      "iam:ListPolicyTags",
       "iam:ListPolicyVersions",
       "iam:ListRolePolicies",
       "iam:ListRoles",
@@ -605,6 +606,7 @@ resource "aws_iam_role_policy" "hcptf_plan_refresh" {
         Action = [
           "iam:GetPolicy",
           "iam:GetPolicyVersion",
+          "iam:ListPolicyTags",
         ]
         Resource = "*"
         Effect   = "Allow"