diff --git a/main.tf b/main.tf
index 4251704c..28426531 100644
--- a/main.tf
+++ b/main.tf
@@ -205,7 +205,8 @@ data "aws_iam_policy_document" "ecs_exec" {
       "ecr:BatchGetImage",
       "logs:CreateLogGroup",
       "logs:CreateLogStream",
-      "logs:PutLogEvents"
+      "logs:PutLogEvents",
+      "secretsmanager:GetSecretValue"
     ]
   }
 }