diff --git a/iam.tf b/iam.tf
index a10c8b6..3e3b12a 100644
--- a/iam.tf
+++ b/iam.tf
@@ -67,6 +67,11 @@ resource "aws_iam_role_policy" "this" {
           "kafka:DeleteVpcConnection"
         ],
         Resource = "*"
+      },
+      {
+        Effect   = "Allow",
+        Action   = "vpce:AllowMultiRegion",
+        Resource = "*"
       }
     ]
   })