diff --git a/baton/aws.mdx b/baton/aws.mdx
index f00bf9cf..ae6c9d5f 100644
--- a/baton/aws.mdx
+++ b/baton/aws.mdx
@@ -346,8 +346,10 @@ The permissions policy below is broken into several sections to align with these
 	        "identitystore:ListUsers",
 	        "organizations:ListAccounts",
 	        "sso:DescribePermissionSet",
+	        "sso:GetInlinePolicyForPermissionSet",
 	        "sso:ListAccountAssignments",
 	        "sso:ListInstances",
+	        "sso:ListManagedPoliciesInPermissionSet",
 	        "sso:ListPermissionSets",
 	        "sso:ListPermissionSetsProvisionedToAccount",
 	        "iam:GetUser",
@@ -731,8 +733,10 @@ resource "aws_iam_role" "ConductorOneIntegration" {
             "identitystore:ListUsers",
             "organizations:ListAccounts",
             "sso:DescribePermissionSet",
+            "sso:GetInlinePolicyForPermissionSet",
             "sso:ListAccountAssignments",
             "sso:ListInstances",
+            "sso:ListManagedPoliciesInPermissionSet",
             "sso:ListPermissionSets",
             "sso:ListPermissionSetsProvisionedToAccount"
           ],