Turbot Guardrails Hub 
Hub
Mods
AWS
171
Mods
429
Resource Types
6,702
Policies
2,320
Controls
1,637
Quick Actions
524
IAM

IAM Role: AWS/CloudTrail/Metadata

PermissionGrant
cloudtrail:DescribeTrailsMetadata
cloudtrail:GetEventSelectorsMetadata
cloudtrail:GetInsightSelectorsMetadata
cloudtrail:GetTrailMetadata
cloudtrail:GetTrailStatusMetadata
cloudtrail:ListPublicKeysMetadata
cloudtrail:ListTagsMetadata
cloudtrail:ListTrailsMetadata
cloudtrail:LookupEventsMetadata
kms:ListAliasesMetadata
s3:GetBucketLocationMetadata
s3:ListAllMyBucketsMetadata