diff --git a/src/index.ts b/src/index.ts
index 8caffdf..fdf26c7 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -29,7 +29,7 @@ export class SelfSignedCertificate extends Construct {
       description: 'Lambda function created by the custom resource provider',
       policyStatements: [{
         Effect: 'Allow',
-        Action: 'acm:ImportCertificate',
+        Action: ['acm:ImportCertificate', 'acm:AddTagsToCertificate'],
         Resource: '*',
       }],
     });