diff --git a/docs/setup_installation/aws/restrictive_permissions.md b/docs/setup_installation/aws/restrictive_permissions.md
index 722a3ee67..6b4b42837 100644
--- a/docs/setup_installation/aws/restrictive_permissions.md
+++ b/docs/setup_installation/aws/restrictive_permissions.md
@@ -139,7 +139,10 @@ If you want to learn more about how this policy works check out:
       {
         "Sid": "RemainingRunInstancePermissions",
         "Effect": "Allow",
-        "Action": "ec2:RunInstances",
+        "Action": [
+          "ec2:RunInstances",
+          "ec2:CreateTags"
+        ],
         "Resource": [
           "arn:aws:ec2:*:*:volume/*",
           "arn:aws:ec2:*::image/*",