diff --git a/snippets/aws-permissions.mdx b/snippets/aws-permissions.mdx
index 46ff491e..2acdbeaf 100644
--- a/snippets/aws-permissions.mdx
+++ b/snippets/aws-permissions.mdx
@@ -573,6 +573,20 @@ export const awsPermissions = {
         "Effect": "Allow",
         "Resource": "*",
         "Sid": "AmazonEKSWorkerNodePolicy"
+      },
+      {
+        "Action": [
+          "cloudwatch:DeleteAlarms",
+          "cloudwatch:DescribeAlarms",
+          "cloudwatch:GetMetricData",
+          "cloudwatch:GetMetricStatistics",
+          "cloudwatch:PutMetricAlarm",
+          "cloudwatch:TagResource",
+          "logs:DescribeLogGroups"
+        ],
+        "Effect": "Allow",
+        "Resource": "*",
+        "Sid": "CloudWatchObservability"
       }
     ],
     "Version": "2012-10-17"