diff --git a/infra/setup/iam.tf b/infra/setup/iam.tf
index ff5b980..1f7eb73 100644
--- a/infra/setup/iam.tf
+++ b/infra/setup/iam.tf
@@ -372,6 +372,7 @@ data "aws_iam_policy_document" "efs" {
       "elasticfilesystem:CreateAccessPoint",
       "elasticfilesystem:CreateFileSystem",
       "elasticfilesystem:TagResource",
+      "ec2:DescribeNetworkInterfaceAttribute",
     ]
     resources = ["*"]
   }