diff --git a/modules/hcp-managed-aws-iam.adoc b/modules/hcp-managed-aws-iam.adoc
index 8efb060214a7..3f1ba781fbc3 100644
--- a/modules/hcp-managed-aws-iam.adoc
+++ b/modules/hcp-managed-aws-iam.adoc
@@ -220,6 +220,7 @@ The roles that {hcp} uses are shown in the following examples:
                 "elasticloadbalancing:ModifyTargetGroup",
                 "elasticloadbalancing:RegisterTargets",
                 "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
+                "elasticloadbalancing:SetSecurityGroups",
                 "iam:CreateServiceLinkedRole",
                 "kms:DescribeKey"
             ],
diff --git a/modules/installation-aws-permissions-iam-roles.adoc b/modules/installation-aws-permissions-iam-roles.adoc
index e7bf5f30f51b..4e106534e619 100644
--- a/modules/installation-aws-permissions-iam-roles.adoc
+++ b/modules/installation-aws-permissions-iam-roles.adoc
@@ -51,6 +51,7 @@ The following lists specify the default permissions for control plane and comput
 * `elasticloadbalancing:RegisterTargets`
 * `elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer`
 * `elasticloadbalancing:SetLoadBalancerPoliciesOfListener`
+* `elasticloadbalancing:SetSecurityGroups`
 * `kms:DescribeKey`
 
 .Default IAM role permissions for compute instance profiles