diff --git a/platform/src/components/aws/postgres.ts b/platform/src/components/aws/postgres.ts
index 5a3c5aaee..d7c6e02d6 100644
--- a/platform/src/components/aws/postgres.ts
+++ b/platform/src/components/aws/postgres.ts
@@ -429,7 +429,11 @@ export class Postgres extends Component implements Link.Linkable {
       include: [
         permission({
           actions: ["secretsmanager:GetSecretValue"],
-          resources: [this.cluster.masterUserSecrets[0].secretArn],
+          resources: [
+            this.cluster.masterUserSecrets[0].secretArn.apply(
+              (v) => v ?? "arn:aws:iam::rdsdoesnotusesecretmanager",
+            ),
+          ],
         }),
         permission({
           actions: [