diff --git a/website/content/docs/secrets/aws.mdx b/website/content/docs/secrets/aws.mdx
index 565ebae6d1b9..66a21e6809f9 100644
--- a/website/content/docs/secrets/aws.mdx
+++ b/website/content/docs/secrets/aws.mdx
@@ -265,6 +265,7 @@ user, you can use a policy like:
         "iam:CreateAccessKey",
         "iam:DeleteAccessKey",
         "iam:DeleteUser",
+        "iam:GetUser",
         "iam:ListAccessKeys",
         "iam:ListAttachedUserPolicies",
         "iam:ListGroupsForUser",