diff --git a/packages/@aws-cdk/aws-glue/lib/table.ts b/packages/@aws-cdk/aws-glue/lib/table.ts
index 76971993b581b..859bb0b2ee325 100644
--- a/packages/@aws-cdk/aws-glue/lib/table.ts
+++ b/packages/@aws-cdk/aws-glue/lib/table.ts
@@ -406,6 +406,7 @@ const readPermissions = [
   'glue:GetPartitions',
   'glue:GetTable',
   'glue:GetTables',
+  'glue:GetTableVersion',
   'glue:GetTableVersions',
 ];
 
diff --git a/packages/@aws-cdk/aws-glue/test/integ.table.expected.json b/packages/@aws-cdk/aws-glue/test/integ.table.expected.json
index a7e41f98f7e82..d9f6d7f602195 100644
--- a/packages/@aws-cdk/aws-glue/test/integ.table.expected.json
+++ b/packages/@aws-cdk/aws-glue/test/integ.table.expected.json
@@ -474,6 +474,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -551,6 +552,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -663,6 +665,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -740,6 +743,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -784,6 +788,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
diff --git a/packages/@aws-cdk/aws-glue/test/table.test.ts b/packages/@aws-cdk/aws-glue/test/table.test.ts
index 4cad8b4b0efd3..ec92e7ced4ff2 100644
--- a/packages/@aws-cdk/aws-glue/test/table.test.ts
+++ b/packages/@aws-cdk/aws-glue/test/table.test.ts
@@ -1185,6 +1185,7 @@ test('grants: read only', () => {
             'glue:GetPartitions',
             'glue:GetTable',
             'glue:GetTables',
+            'glue:GetTableVersion',
             'glue:GetTableVersions',
           ],
           Effect: 'Allow',
@@ -1393,6 +1394,7 @@ test('grants: read and write', () => {
             'glue:GetPartitions',
             'glue:GetTable',
             'glue:GetTables',
+            'glue:GetTableVersion',
             'glue:GetTableVersions',
             'glue:BatchCreatePartition',
             'glue:BatchDeletePartition',