diff --git a/CHANGELOG.md b/CHANGELOG.md
index c76455559a5..2493b5c6556 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,8 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/).
   - Added supporting Terraform for the granule-invalidator task that allows it to be included in the Cumulus terraform zipfile and deployed with Cumulus.
 - **CUMULUS-4394**
   - Added python code for CnmResponse task adapted from https://github.com/podaac/cumulus-cnm-response-task
+- **CUMULUS-4498**
+  - Added `states:StartExecution` action to the `<prefix>-steprole` IAM role.
 
 ### Changed
 
diff --git a/tf-modules/ingest/iam.tf b/tf-modules/ingest/iam.tf
index e31c2edd2ea..d38a48ec212 100644
--- a/tf-modules/ingest/iam.tf
+++ b/tf-modules/ingest/iam.tf
@@ -79,7 +79,8 @@ data "aws_iam_policy_document" "step_policy" {
       "iam:GetPolicy",
       "iam:GetPolicyVersion",
       "iam:GetRole",
-      "iam:PassRole"
+      "iam:PassRole",
+      "states:StartExecution"
     ]
     resources = ["*"]
   }