Mods
AWS

IAM Role: AWS/AppFlow/Metadata

PermissionGrant
appflow:DescribeConnectorEntityMetadata
appflow:DescribeConnectorFieldsMetadata
appflow:DescribeConnectorProfilesMetadata
appflow:DescribeConnectorsMetadata
appflow:DescribeFlowExecutionMetadata
appflow:DescribeFlowExecutionRecordsMetadata
appflow:DescribeFlowsMetadata
appflow:ListConnectorEntitiesMetadata
appflow:ListConnectorFieldsMetadata
appflow:ListFlowsMetadata
iam:ListRolesMetadata
kms:DescribeKeyMetadata
kms:ListAliasesMetadata
s3:GetBucketLocationMetadata
s3:GetBucketPolicyMetadata