diff --git a/aws/policy/application-services.yaml b/aws/policy/application-services.yaml
index 25197e9..21181a1 100644
--- a/aws/policy/application-services.yaml
+++ b/aws/policy/application-services.yaml
@@ -72,6 +72,7 @@ Statement:
       - ssm:StartSession
       - ssm:TerminateSession
       - ssm:UpdateAssociationStatus
+      - ssm:UpdateDocument*
       - ssm:UpdateInstanceAssociationStatus
       - ssm:UpdateInstanceInformation
       - ssmmessages:CreateControlChannel