diff --git a/modules/nat/iam.tf b/modules/nat/iam.tf
index ba0a198..f2a5185 100644
--- a/modules/nat/iam.tf
+++ b/modules/nat/iam.tf
@@ -9,6 +9,7 @@ data "aws_iam_policy_document" "this" {
       "iam:DeleteRole",
       "iam:TagRole",
       "iam:PutRolePolicy",
+      "iam:DeleteRolePolicy",
       "iam:PassRole",
       "iam:Get*",
       "iam:List*"