diff --git a/vault/policies/cert-manager.hcl b/vault/policies/cert-manager.hcl
index 0db2bdf..778f5b6 100644
--- a/vault/policies/cert-manager.hcl
+++ b/vault/policies/cert-manager.hcl
@@ -4,3 +4,6 @@ path "kv/data/acme" {
 path "kv/data/namecheap" {
   capabilities = ["read"]
 }
+path "kv/data/aws" {
+  capabilities = ["read"]
+}