diff --git a/terraform/environments/delius-nextcloud/modules/components/nextcloud/ecs_service.tf b/terraform/environments/delius-nextcloud/modules/components/nextcloud/ecs_service.tf
index 2e7a8e5d560..d3bd7332f16 100644
--- a/terraform/environments/delius-nextcloud/modules/components/nextcloud/ecs_service.tf
+++ b/terraform/environments/delius-nextcloud/modules/components/nextcloud/ecs_service.tf
@@ -163,7 +163,7 @@ data "aws_iam_policy_document" "access_ldap_secret" {
     ]
     effect = "Allow"
     resources = [
-      "arn:aws:ssm:eu-west-2:${var.platform_vars.environment_management.account_ids[join("-", ["delius-core", var.account_info.mp_environment])]}:secret:ldap-admin-password*"
+      "arn:aws:secretsmanager:eu-west-2:${var.platform_vars.environment_management.account_ids[join("-", ["delius-core", var.account_info.mp_environment])]}:secret:ldap-admin-password*"
     ]
   }
 }