diff --git a/cluster.tf b/cluster.tf
index 53a696bd..03c30303 100644
--- a/cluster.tf
+++ b/cluster.tf
@@ -156,7 +156,8 @@ data "aws_iam_policy_document" "cluster_elb_sl_role_creation" {
     effect = "Allow"
     actions = [
       "ec2:DescribeAccountAttributes",
-      "ec2:DescribeInternetGateways"
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeAddresses"
     ]
     resources = ["*"]
   }