diff --git a/iam/create_role_to_assume_cfn.yaml b/iam/create_role_to_assume_cfn.yaml
index 99e0a767..1e1140a1 100644
--- a/iam/create_role_to_assume_cfn.yaml
+++ b/iam/create_role_to_assume_cfn.yaml
@@ -55,14 +55,12 @@ Resources:
             Statement:
             - Effect: Allow
               Action:
-                - 'dax:ListTables'
                 - 'ds:ListAuthorizedApplications'
-                - 'ds:DescribeRoles'
                 - 'ec2:GetEbsEncryptionByDefault'
                 - 'ecr:Describe*'
                 - 'support:Describe*'
                 - 'tag:GetTagKeys'
                 - 'lambda:GetFunction'
-                - 'glue:GetConnections',
+                - 'glue:GetConnections'
                 - 's3:GetAccountPublicAccessBlock'
               Resource: '*'