diff --git a/pkg/asset/installconfig/aws/permissions.go b/pkg/asset/installconfig/aws/permissions.go
index 479dabf7130..8a846cf13be 100644
--- a/pkg/asset/installconfig/aws/permissions.go
+++ b/pkg/asset/installconfig/aws/permissions.go
@@ -249,7 +249,7 @@ var permissions = map[PermissionGroup][]string{
 	},
 	// Permissions required for deleting a cluster with shared network resources
 	PermissionDeleteSharedNetworking: {
-		"tag:UnTagResources",
+		"tag:UntagResources",
 	},
 	// Permissions required for creating an instance role
 	PermissionCreateInstanceRole: {
@@ -272,6 +272,7 @@ var permissions = map[PermissionGroup][]string{
 	// Permissions required for deleting a cluster with shared instance profiles
 	PermissionDeleteSharedInstanceProfile: {
 		"iam:UntagInstanceProfile",
+		"tag:UntagResources",
 	},
 	PermissionCreateHostedZone: {
 		"route53:CreateHostedZone",