Mods
AWS

IAM Role: AWS/AppConfig/Operator

PermissionGrant
appconfig:TagResourceOperator
appconfig:UntagResourceOperator
appconfig:GetApplicationMetadata
appconfig:GetConfigurationMetadata
appconfig:GetConfigurationProfileMetadata
appconfig:GetDeploymentMetadata
appconfig:GetDeploymentStrategyMetadata
appconfig:GetEnvironmentMetadata
appconfig:GetHostedConfigurationVersionMetadata
appconfig:ListApplicationsMetadata
appconfig:ListConfigurationProfilesMetadata
appconfig:ListDeploymentStrategiesMetadata
appconfig:ListDeploymentsMetadata
appconfig:ListEnvironmentsMetadata
appconfig:ListHostedConfigurationVersionsMetadata
appconfig:ListTagsForResourceMetadata
cloudwatch:DescribeAlarmsMetadata
iam:ListRolesMetadata
tag:GetTagKeysMetadata
tag:GetTagValuesMetadata