diff --git a/management/global/sso/policies.tf b/management/global/sso/policies.tf
index 5bd64738d..a109dbe05 100644
--- a/management/global/sso/policies.tf
+++ b/management/global/sso/policies.tf
@@ -41,6 +41,8 @@ data "aws_iam_policy_document" "devops" {
       "lambda:*",
       "lightsail:*",
       "logs:*",
+      "network-firewall:*",
+      "networkmanager:*",
       "ram:*",
       "rds:*",
       "redshift:*",