diff --git a/terraform/environments/bootstrap/member-bootstrap/iam.tf b/terraform/environments/bootstrap/member-bootstrap/iam.tf
index dfb36268d..f4d547984 100644
--- a/terraform/environments/bootstrap/member-bootstrap/iam.tf
+++ b/terraform/environments/bootstrap/member-bootstrap/iam.tf
@@ -452,6 +452,7 @@ data "aws_iam_policy_document" "policy" {
       "dms:RebootReplicationInstance",
       "ds:ResetUserPassword",
       "ds:DescribeDirectories",
+      "ds-data:*",
       "dynamodb:GetItem",
       "dynamodb:PutItem",
       "ecs:*Service*",