diff --git a/pkg/model/iam/iam_builder.go b/pkg/model/iam/iam_builder.go
index b008b11dac..8e5784d10f 100644
--- a/pkg/model/iam/iam_builder.go
+++ b/pkg/model/iam/iam_builder.go
@@ -1212,6 +1212,7 @@ func addCiliumEniPermissions(p *Policy) {
 		"ec2:DeleteNetworkInterface",
 		"ec2:ModifyNetworkInterfaceAttribute",
 		"ec2:DescribeVpcs",
+		"ec2:CreateTags",
 	)
 }