diff --git a/iam/prowler-additions-policy.json b/iam/prowler-additions-policy.json
index f0285c242f..fb491658ba 100644
--- a/iam/prowler-additions-policy.json
+++ b/iam/prowler-additions-policy.json
@@ -11,7 +11,9 @@
 		        "lambda:GetFunction",
                 "glue:GetConnections",
                 "glue:SearchTables",
-                "s3:GetAccountPublicAccessBlock"
+                "s3:GetAccountPublicAccessBlock",
+                "shield:GetSubscriptionState",
+                "shield:DescribeProtection"
             ],
             "Resource": "*",
             "Effect": "Allow",
diff --git a/util/codebuild/codebuild-prowler-audit-account-cfn.yaml b/util/codebuild/codebuild-prowler-audit-account-cfn.yaml
index 7cec663623..aff4e719e4 100644
--- a/util/codebuild/codebuild-prowler-audit-account-cfn.yaml
+++ b/util/codebuild/codebuild-prowler-audit-account-cfn.yaml
@@ -193,6 +193,8 @@ Resources:
                   - support:Describe*
                   - tag:GetTagKeys
                   - lambda:GetFunction
+                  - shield:GetSubscriptionState
+                  - shield:DescribeProtection
                 Effect: Allow
                 Resource: !Sub 'arn:aws:glue:${AWS::Region}:${AWS::AccountId}:catalog'
         - PolicyName: CodeBuild
diff --git a/util/org-multi-account/ProwlerRole.yaml b/util/org-multi-account/ProwlerRole.yaml
index 544cf1cd84..183b2bee75 100644
--- a/util/org-multi-account/ProwlerRole.yaml
+++ b/util/org-multi-account/ProwlerRole.yaml
@@ -96,6 +96,8 @@ Resources:
                   - states:ListActivities
                   - support:Describe*
                   - tag:GetTagKeys
+                  - shield:GetSubscriptionState
+                  - shield:DescribeProtection
         - PolicyName: Prowler-S3-Reports
           PolicyDocument:
             Version: 2012-10-17
diff --git a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
index e5efcd4596..5751f1f92d 100644
--- a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
+++ b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
@@ -97,6 +97,8 @@ Resources:
                   - states:ListActivities
                   - support:Describe*
                   - tag:GetTagKeys
+                  - shield:GetSubscriptionState
+                  - shield:DescribeProtection
         - PolicyName: Prowler-S3-Reports
           PolicyDocument:
             Version: 2012-10-17
diff --git a/util/terraform-kickstarter/main.tf b/util/terraform-kickstarter/main.tf
index c51557b636..c50a01f89a 100644
--- a/util/terraform-kickstarter/main.tf
+++ b/util/terraform-kickstarter/main.tf
@@ -320,6 +320,8 @@ resource "aws_iam_policy" "prowler_kickstarter_iam_policy" {
                   "support:Describe*",
                   "tag:GetTagKeys",
                   "lambda:GetFunction"
+                  "shield:GetSubscriptionState",
+                  "shield:DescribeProtection"
                   ]
         Effect   = "Allow"
         Resource = "arn:aws:glue:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:catalog"