diff --git a/cft-templates/RA-ec2-dcv.yml b/cft-templates/RA-ec2-dcv.yml
index 72100b6..3fd38a1 100644
--- a/cft-templates/RA-ec2-dcv.yml
+++ b/cft-templates/RA-ec2-dcv.yml
@@ -63,6 +63,27 @@ Resources:
               - ssm:GetParameters
               - ssm:DescribeParameters
             Resource: "*"
+          - Sid: AllowSSMAgentCommunication
+            Effect: Allow
+            Action:
+              - ssm:UpdateInstanceInformation
+              - ssm:GetDocument
+              - ssm:DescribeDocument
+              - ssm:GetManifest
+              - ssm:ListInstanceAssociations
+              - ssm:PutInventory
+              - ssm:PutComplianceItems
+              - ssmmessages:CreateControlChannel
+              - ssmmessages:CreateDataChannel
+              - ssmmessages:OpenControlChannel
+              - ssmmessages:OpenDataChannel
+              - ec2messages:AcknowledgeMessage
+              - ec2messages:DeleteMessage
+              - ec2messages:FailMessage
+              - ec2messages:GetEndpoint
+              - ec2messages:GetMessages
+              - ec2messages:SendReply
+            Resource: "*"
           - Sid: AllowKMSDecrypt
             Effect: Allow
             Action: