diff --git a/docs/deploy-from-ansible.md b/docs/deploy-from-ansible.md
index 9d3d3f2..361272d 100644
--- a/docs/deploy-from-ansible.md
+++ b/docs/deploy-from-ansible.md
@@ -202,6 +202,28 @@ Required variables:
 
 Possible options can be gathered via cli `aws lightsail get-regions`
 
+#### Minimum required IAM permissions for deployment:
+
+```
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "LightsailDeployment",
+            "Effect": "Allow",
+            "Action": [
+                "lightsail:GetInstance",
+                "lightsail:CreateInstances",
+                "lightsail:OpenInstancePublicPorts"
+            ],
+            "Resource": [
+                "*"
+            ]
+        }
+    ]
+}
+```
+
 ### Scaleway
 
 Required variables: