diff --git a/terraform/modules/azure-network/key-vault.tf b/terraform/modules/azure-network/key-vault.tf
index 260d074d..ae410460 100644
--- a/terraform/modules/azure-network/key-vault.tf
+++ b/terraform/modules/azure-network/key-vault.tf
@@ -86,7 +86,7 @@ resource "azurerm_key_vault_access_policy" "kv_gh_ap" {
     "SetRotationPolicy"
   ]
 
-  secret_permissions = ["List", "Get", "Set"]
+  secret_permissions = ["List", "Get", "Set", "Recover"]
 
   certificate_permissions = [
     "Create",