diff --git a/src/deployment/DeploymentInstance-Cfn.yaml b/src/deployment/DeploymentInstance-Cfn.yaml
index 4a704d0a..aea18b3e 100644
--- a/src/deployment/DeploymentInstance-Cfn.yaml
+++ b/src/deployment/DeploymentInstance-Cfn.yaml
@@ -405,6 +405,9 @@ Resources:
                   - lambda:RemovePermission
                   - lambda:DeleteFunction
                   - lambda:UpdateFunctionCode
+                  # Needed for subsequent updates to deployment
+                  - lambda:UpdateFunctionConfiguration
+                  - lambda:ListTags
                 Resource: "*"
         - PolicyName: SMWorkflowPolicy
           PolicyDocument: