diff --git a/deployment/CFN-templates/aws-cloud-migration-factory-solution-target-account.template b/deployment/CFN-templates/aws-cloud-migration-factory-solution-target-account.template
index 252d7e9..fd9ccaf 100644
--- a/deployment/CFN-templates/aws-cloud-migration-factory-solution-target-account.template
+++ b/deployment/CFN-templates/aws-cloud-migration-factory-solution-target-account.template
@@ -108,7 +108,10 @@ Resources:
                   - 'ssm:DeleteParameters'
                   - 'ssm:GetParameter'
                   - 'ssm:GetParameters'
+                  - 'ssm:SendCommand'
                   - 'ssm:GetDocument'
+                  - 'ssm:StartSession'
+                  - 'ssm:ListCommandInvocations'
                 Resource: '*'
         -
           PolicyName: LambdaRolePolicy