diff --git a/deployment/lib/github-stack.ts b/deployment/lib/github-stack.ts
index 79f1bd7..d4ab108 100644
--- a/deployment/lib/github-stack.ts
+++ b/deployment/lib/github-stack.ts
@@ -26,6 +26,11 @@ const appResourcePolicies = (tagKey: string, tagValue: string, stacks: string[])
       "ec2:DescribeSecurityGroups",
       "ec2:DeleteSecurityGroup",
       "ec2:CreateTags",
+      "ec2:DeleteTags",
+      "ec2:RevokeSecurityGroupIngress",
+      "ec2:RevokeSecurityGroupEgress",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:AuthorizeSecurityGroupEgress",
       "iam:*",
       "events:*",
       "route53:*",