diff --git a/fbpcs/infra/cloud_bridge/data_ingestion/glue.tf b/fbpcs/infra/cloud_bridge/data_ingestion/glue.tf
index 9618b1a1e..d3e57e8ed 100644
--- a/fbpcs/infra/cloud_bridge/data_ingestion/glue.tf
+++ b/fbpcs/infra/cloud_bridge/data_ingestion/glue.tf
@@ -53,6 +53,62 @@ resource "aws_iam_role_policy" "s3_policy" {
 EOF
 }
 
+resource "aws_iam_role_policy" "pass_glue_service_role" {
+  name   = "pass-glue-service-role${var.tag_postfix}"
+  role   = aws_iam_role.glue_service_role.id
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": [
+        "iam:PassRole"
+      ],
+      "Effect": "Allow",
+      "Resource": "arn:aws:iam::*:role/AWSGlueServiceRole*",
+      "Condition": {
+        "StringLike": {
+          "iam:PassedToService": [
+            "glue.amazonaws.com"
+          ]
+        }
+      }
+    },
+    {
+      "Action": [
+        "iam:PassRole"
+      ],
+      "Effect": "Allow",
+      "Resource": "arn:aws:iam::*:role/AWSGlueServiceNotebookRole*",
+      "Condition": {
+        "StringLike": {
+          "iam:PassedToService": [
+            "ec2.amazonaws.com"
+          ]
+        }
+      }
+    },
+    {
+      "Action": [
+        "iam:PassRole"
+      ],
+      "Effect": "Allow",
+      "Resource": [
+        "arn:aws:iam::*:role/service-role/AWSGlueServiceRole*"
+      ],
+      "Condition": {
+        "StringLike": {
+          "iam:PassedToService": [
+            "glue.amazonaws.com"
+          ]
+        }
+      }
+    }
+  ]
+}
+EOF
+}
+
 resource "aws_glue_crawler" "mpc_events_crawler" {
   database_name = aws_glue_catalog_database.mpc_database.name
   name          = "mpc-events-crawler${var.tag_postfix}"