diff --git a/deployment-policy.json b/deployment-policy.json
index 4f2020e..df29464 100644
--- a/deployment-policy.json
+++ b/deployment-policy.json
@@ -70,6 +70,12 @@
                 "logs:DescribeLogGroups",
                 "logs:ListTagsLogGroup",
                 "logs:PutRetentionPolicy",
+                "logs:TagResource",
+                "aps:CreateWorkspace",
+                "aps:DescribeWorkspace",
+                "aps:DescribeLoggingConfiguration",
+                "aps:ListTagsForResource",
+                "aps:DeleteWorkspace",
                 "rds:AddTagsToResource",
                 "rds:CreateDBInstance",
                 "rds:CreateDBSubnetGroup",