diff --git a/data/reusables/actions/enterprise-s3-permission.md b/data/reusables/actions/enterprise-s3-permission.md
index b53432227e..070010e8a1 100644
--- a/data/reusables/actions/enterprise-s3-permission.md
+++ b/data/reusables/actions/enterprise-s3-permission.md
@@ -7,3 +7,5 @@
 * `s3:AbortMultipartUpload`
 * `s3:DeleteObject`
 * `s3:ListBucket`
+* `kms:GenerateDataKey` (if Key Management Service (KMS) encryption has been enabled)
+