diff --git a/terraform/environments/bootstrap/member-bootstrap/iam.tf b/terraform/environments/bootstrap/member-bootstrap/iam.tf
index ea3c94a2b..1dfe66416 100644
--- a/terraform/environments/bootstrap/member-bootstrap/iam.tf
+++ b/terraform/environments/bootstrap/member-bootstrap/iam.tf
@@ -113,7 +113,6 @@ data "aws_iam_policy_document" "member-access" {
       "ec2:*Spot*",
       "ec2:*InternetGateway*",
       "ec2:*NatGateway*",
-
       "ecr-public:*",
       "ecr:*",
       "ecs:*",
@@ -647,6 +646,14 @@ data "aws_iam_policy_document" "oidc_assume_role_member" {
     actions = ["s3:PutObject",
     "s3:PutObjectAcl"]
   }
+  statement {
+    effect = "Allow"
+    actions = [
+      "dynamodb:GetItem",
+      "dynamodb:PutItem"
+    ]
+    resources = ["arn:aws:dynamodb:eu-west-2:${data.aws_caller_identity.modernisation_platform.account_id}:table/modernisation-platform-terraform-state-lock"]
+  }
 }
 
 # AWS Shield Advanced SRT (Shield Response Team) support role