diff --git a/src/plugin/tasks/serverless/snippets/serverless/.base/data.yml b/src/plugin/tasks/serverless/snippets/serverless/.base/data.yml
index 16367494..e4b26717 100644
--- a/src/plugin/tasks/serverless/snippets/serverless/.base/data.yml
+++ b/src/plugin/tasks/serverless/snippets/serverless/.base/data.yml
@@ -244,6 +244,7 @@ resources:
             - Effect: Allow
               Action:
                 - 'iam:GetRole'
+                - 'iam:TagRole'
                 - 'iam:PassRole'
                 - 'iam:CreateRole'
                 - 'iam:DeleteRole'
diff --git a/test/projects/assorted/@sls-closedsource-dynamodb/serverless/.base/data.yml b/test/projects/assorted/@sls-closedsource-dynamodb/serverless/.base/data.yml
index 16367494..e4b26717 100644
--- a/test/projects/assorted/@sls-closedsource-dynamodb/serverless/.base/data.yml
+++ b/test/projects/assorted/@sls-closedsource-dynamodb/serverless/.base/data.yml
@@ -244,6 +244,7 @@ resources:
             - Effect: Allow
               Action:
                 - 'iam:GetRole'
+                - 'iam:TagRole'
                 - 'iam:PassRole'
                 - 'iam:CreateRole'
                 - 'iam:DeleteRole'
diff --git a/test/projects/assorted/@sls-closedsource-react/serverless/.base/data.yml b/test/projects/assorted/@sls-closedsource-react/serverless/.base/data.yml
index 16367494..e4b26717 100644
--- a/test/projects/assorted/@sls-closedsource-react/serverless/.base/data.yml
+++ b/test/projects/assorted/@sls-closedsource-react/serverless/.base/data.yml
@@ -244,6 +244,7 @@ resources:
             - Effect: Allow
               Action:
                 - 'iam:GetRole'
+                - 'iam:TagRole'
                 - 'iam:PassRole'
                 - 'iam:CreateRole'
                 - 'iam:DeleteRole'
diff --git a/test/projects/assorted/@sls-closedsource/serverless/.base/data.yml b/test/projects/assorted/@sls-closedsource/serverless/.base/data.yml
index 16367494..e4b26717 100644
--- a/test/projects/assorted/@sls-closedsource/serverless/.base/data.yml
+++ b/test/projects/assorted/@sls-closedsource/serverless/.base/data.yml
@@ -244,6 +244,7 @@ resources:
             - Effect: Allow
               Action:
                 - 'iam:GetRole'
+                - 'iam:TagRole'
                 - 'iam:PassRole'
                 - 'iam:CreateRole'
                 - 'iam:DeleteRole'