diff --git a/tests/integration/README.md b/tests/integration/README.md
index 462c474e..ce73f1bb 100644
--- a/tests/integration/README.md
+++ b/tests/integration/README.md
@@ -111,16 +111,22 @@ provisioning the infrastructure and running the tests:
                 "eks:UpdateNodegroupVersion",
                 "iam:AttachRolePolicy",
                 "iam:CreateOpenIDConnectProvider",
+                "iam:CreatePolicy",
                 "iam:CreateRole",
                 "iam:DeleteOpenIDConnectProvider",
+                "iam:DeletePolicy",
                 "iam:DeleteRole",
                 "iam:DetachRolePolicy",
                 "iam:GetOpenIDConnectProvider",
+                "iam:GetPolicy",
+                "iam:GetPolicyVersion",
                 "iam:GetRole",
                 "iam:ListAttachedRolePolicies",
                 "iam:ListInstanceProfilesForRole",
+                "iam:ListPolicyVersions",
                 "iam:ListRolePolicies",
                 "iam:TagOpenIDConnectProvider",
+                "iam:TagPolicy",
                 "iam:TagRole",
                 "ssm:GetParameters"
             ],
@@ -250,16 +256,22 @@ module "aws_gh_actions" {
     "eks:UpdateNodegroupVersion",
     "iam:AttachRolePolicy",
     "iam:CreateOpenIDConnectProvider",
+    "iam:CreatePolicy",
     "iam:CreateRole",
     "iam:DeleteOpenIDConnectProvider",
+    "iam:DeletePolicy",
     "iam:DeleteRole",
     "iam:DetachRolePolicy",
     "iam:GetOpenIDConnectProvider",
+    "iam:GetPolicy",
+    "iam:GetPolicyVersion",
     "iam:GetRole",
     "iam:ListAttachedRolePolicies",
     "iam:ListInstanceProfilesForRole",
+    "iam:ListPolicyVersions",
     "iam:ListRolePolicies",
     "iam:TagOpenIDConnectProvider",
+    "iam:TagPolicy",
     "iam:TagRole",
     "ssm:GetParameters"
   ]