diff --git a/terraform/main.tf b/terraform/main.tf
index 9708652..bea8c3c 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -102,6 +102,7 @@ resource "aws_iam_policy" "rds_params_read_only_policy" {
       {
         Effect = "Allow"
         Action = [
+          "ssm:GetParameter",
           "ssm:GetParameters"
         ],
         Resource = module.rds_params.ssm_parameter_arn