diff --git a/content/operate/rc/subscriptions/bring-your-own-cloud/iam-resources/aws-console.md b/content/operate/rc/subscriptions/bring-your-own-cloud/iam-resources/aws-console.md
index 6b96040df..efcba66aa 100644
--- a/content/operate/rc/subscriptions/bring-your-own-cloud/iam-resources/aws-console.md
+++ b/content/operate/rc/subscriptions/bring-your-own-cloud/iam-resources/aws-console.md
@@ -65,7 +65,7 @@ First, create a policy to use for the new instance role:
                     "Effect": "Allow",
                     "Action": [
                         "ec2:AuthorizeSecurityGroupIngress",
-                        "ec2:DeleteSecurityGroup",
+                        "ec2:DeleteSecurityGroup"
                     ],
                     "Resource": "*",
                     "Condition": {