diff --git a/spire/cd/template.yml b/spire/cd/template.yml
index b39842796..77f35f23f 100644
--- a/spire/cd/template.yml
+++ b/spire/cd/template.yml
@@ -209,6 +209,7 @@ Resources:
                   - application-autoscaling:*
                   - athena:*
                   - autoscaling:*
+                  - cloudformation:*
                   - cloudfront:*
                   - cloudwatch:*
                   - dynamodb:*