diff --git a/pkg/model/iam/iam_builder.go b/pkg/model/iam/iam_builder.go
index f3064fb647..2a68a25661 100644
--- a/pkg/model/iam/iam_builder.go
+++ b/pkg/model/iam/iam_builder.go
@@ -1001,6 +1001,8 @@ func AddClusterAutoscalerPermissions(p *Policy, useStaticInstanceList bool) {
 
 // AddAWSEBSCSIDriverPermissions appens policy statements that the AWS EBS CSI Driver needs to operate.
 func AddAWSEBSCSIDriverPermissions(p *Policy, appendSnapshotPermissions bool) {
+	addKMSIAMPolicies(p)
+
 	if appendSnapshotPermissions {
 		addSnapshotPersmissions(p)
 	}