diff --git a/buildman/templates/cloudconfig.yaml b/buildman/templates/cloudconfig.yaml
index f7da0e9ea..9136c11aa 100644
--- a/buildman/templates/cloudconfig.yaml
+++ b/buildman/templates/cloudconfig.yaml
@@ -20,7 +20,7 @@ ssh_authorized_keys:
 
 write_files:
 - path: /root/disable-aws-metadata.sh
-  permission: '0655'
+  permission: '0755'
   content: |
     iptables -t nat -I PREROUTING -p tcp -d 169.254.169.254 --dport 80 -j DNAT --to-destination 1.1.1.1