diff --git a/README.md b/README.md
index f392b82..bc7e4c5 100644
--- a/README.md
+++ b/README.md
@@ -135,6 +135,7 @@ The audit policy is comprised of the following permissions:
 |                            | apigatewayv2:GetRouteResponses                          |           |
 |                            | apigatewayv2:GetStages                                  |           |
 |                            | apigatewayv2:GetVpcLinks                                |           |
+| GLACIER                    | glacier:ListTagsForVault                                | *         |
 | WAFREGIONAL                | waf-regional:ListRules                                  | *         |
 |                            | waf-regional:GetRule                                    |           |
 |                            | waf-regional:ListRuleGroups                             |           |
diff --git a/main.tf b/main.tf
index c3a630b..0e8f6db 100644
--- a/main.tf
+++ b/main.tf
@@ -134,6 +134,11 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
     "apigatewayv2:GetVpcLinks"]
     resources = ["*"]
   }
+  statement {
+    sid = "GLACIER"
+    actions = ["glacier:ListTagsForVault"]
+    resources = ["*"]
+  }
   statement {
     sid = "WAFREGIONAL"
     actions = ["waf-regional:ListRules",