diff --git a/enos/ci/service-user-iam/main.tf b/enos/ci/service-user-iam/main.tf
index 2d6235f00e..6f85a70f2b 100644
--- a/enos/ci/service-user-iam/main.tf
+++ b/enos/ci/service-user-iam/main.tf
@@ -177,6 +177,7 @@ data "aws_iam_policy_document" "enos_policy_document" {
       "iam:GetRolePolicy",
       "iam:GetUser",
       "iam:GetUserId",
+      "iam:GetUserPolicy",
       "iam:ListAccessKeys",
       "iam:ListAttachedRolePolicies",
       "iam:ListGroupsForUser",