diff --git a/accounts/serverless.yml b/accounts/serverless.yml
index 5661e6c..c277594 100644
--- a/accounts/serverless.yml
+++ b/accounts/serverless.yml
@@ -11,9 +11,16 @@ provider:
   apiName: offen-${self:provider.stage}
   logs:
     restApi: true
+  iamRoleStatements:
+    - Effect: 'Allow'
+      Action:
+        - secretsmanager:GetSecretValue
+      Resource: '*'
 
 package:
   individually: true
+  exclude:
+    - tests
 
 plugins:
   - serverless-domain-manager