diff --git a/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json b/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
index e2ebdc6372..7ac24d4685 100644
--- a/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
+++ b/resources/sts/hypershift/openshift_hcp_kube_controller_manager_credentials_policy.json
@@ -79,6 +79,7 @@
         "elasticloadbalancing:ModifyTargetGroup",
         "elasticloadbalancing:DeleteTargetGroup",
         "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
+        "elasticloadbalancing:SetSecurityGroups",
         "elasticloadbalancing:CreateLoadBalancerListeners",
         "elasticloadbalancing:DeleteLoadBalancerListeners",
         "elasticloadbalancing:AttachLoadBalancerToSubnets",