diff --git a/aws-observability/apps/permissionchecker/AWSObservabilityCFTemplatePermissions.json b/aws-observability/apps/permissionchecker/AWSObservabilityCFTemplatePermissions.json
index 8d4d93aa..24a67f78 100644
--- a/aws-observability/apps/permissionchecker/AWSObservabilityCFTemplatePermissions.json
+++ b/aws-observability/apps/permissionchecker/AWSObservabilityCFTemplatePermissions.json
@@ -82,6 +82,7 @@
                 "lambda:GetFunction",
                 "lambda:GetFunctionConfiguration",
                 "lambda:InvokeFunction",
+                "lambda:ListTags",
                 "lambda:RemovePermission",
                 "lambda:TagResource",
                 "lambda:UpdateFunctionCode",