diff --git a/pkg/clouds/pulumi/aws/ecs_fargate.go b/pkg/clouds/pulumi/aws/ecs_fargate.go
index 68cbb9ce..710e6c1c 100644
--- a/pkg/clouds/pulumi/aws/ecs_fargate.go
+++ b/pkg/clouds/pulumi/aws/ecs_fargate.go
@@ -585,6 +585,7 @@ func createEcsFargateCluster(ctx *sdk.Context, stack api.Stack, params pApi.Prov
 		"elasticfilesystem:ClientWrite",
 		"elasticfilesystem:DescribeMountTargets",
 		"elasticfilesystem:DescribeFileSystems",
+		"cloudwatch:PutMetricData",
 	}
 
 	params.Log.Info(ctx.Context(), "adding extra roles %q for lambda %q...", strings.Join(awsCloudExtras.AwsRoles, ","), stack.Name)