diff --git a/src/data/replicator/coverage.json b/src/data/replicator/coverage.json
index c6d9f577..c185cac8 100644
--- a/src/data/replicator/coverage.json
+++ b/src/data/replicator/coverage.json
@@ -62,8 +62,8 @@
     {
         "resource_type": "AWS::KMS::Key",
         "policy_statements": [
-            "cloudformation:GetResource",
-            "kms:DescribeKey"
+            "kms:DescribeKey",
+            "kms:ListResourceTags"
         ],
         "service": "kms",
         "identifier": "KeyId"
@@ -92,6 +92,7 @@
         "resource_type": "AWS::SSM::Parameter",
         "policy_statements": [
             "cloudformation:GetResource",
+            "ssm:DescribeParameters",
             "ssm:GetParameters"
         ],
         "service": "ssm",