diff --git a/pkg/model/iam/iam_builder.go b/pkg/model/iam/iam_builder.go
index 5714b5d7c0f33..a8600a6099008 100644
--- a/pkg/model/iam/iam_builder.go
+++ b/pkg/model/iam/iam_builder.go
@@ -730,6 +730,7 @@ func addCalicoSrcDstCheckPermissions(p *Policy) {
 
 func addNodeupPermissions(p *Policy, clusterName string) {
 
+	addKMSGenerateRandomPolicies(p)
 	resource := stringorslice.Slice([]string{"*"})
 	p.Statement = append(p.Statement,
 		&Statement{