diff --git a/cookbooks/vault/setup.rb b/cookbooks/vault/setup.rb
index 5def717..fd42d85 100644
--- a/cookbooks/vault/setup.rb
+++ b/cookbooks/vault/setup.rb
@@ -7,3 +7,8 @@ template '/etc/vault.d/vault.hcl' do
   variables(HOSTNAME: node['vault']['hostname'],  IPADDR: node['vault']['ipaddr'], IPS: node['vault']['ips'])
 end
 
+directory '/etc/vault.d/policies' do
+  owner 'vault'
+  group 'vault'
+  mode '755'
+end