diff --git a/actions.yaml b/actions.yaml
index a20dc84..693db49 100644
--- a/actions.yaml
+++ b/actions.yaml
@@ -158,6 +158,7 @@ DataAccess:
   - kinesis:GetRecords
   - kinesisvideo:GetImages
   - kinesisvideo:GetMedia
+  - kms:CreateGrant
   - lambda:GetFunction
   - lambda:GetLayerVersion
   - lightsail:GetContainerImages
@@ -230,6 +231,7 @@ PrivEsc:
   - iam:SetDefaultPolicyVersion
   - iam:UpdateAssumeRolePolicy
   - iam:UpdateLoginProfile
+  - kms:CreateGrant
 
 ResourceExposure:
   Actions: