Mods
AWS

IAM Role: AWS/EC2/Metadata

PermissionGrant
acm:ListCertificatesMetadata
application-autoscaling:DescribeScalableTargetsMetadata
application-autoscaling:DescribeScalingActivitiesMetadata
application-autoscaling:DescribeScalingPoliciesMetadata
application-autoscaling:DescribeScheduledActionsMetadata
autoscaling-plans:DescribeScalingPlanResourcesMetadata
autoscaling-plans:DescribeScalingPlansMetadata
autoscaling-plans:GetScalingPlanResourceForecastDataMetadata
autoscaling:DescribeAccountLimitsMetadata
autoscaling:DescribeAdjustmentTypesMetadata
autoscaling:DescribeAutoScalingGroupsMetadata
autoscaling:DescribeAutoScalingInstancesMetadata
autoscaling:DescribeAutoScalingNotificationTypesMetadata
autoscaling:DescribeInstanceRefreshesMetadata
autoscaling:DescribeLaunchConfigurationsMetadata
autoscaling:DescribeLifecycleHooksMetadata
autoscaling:DescribeLifecycleHookTypesMetadata
autoscaling:DescribeLoadBalancersMetadata
autoscaling:DescribeLoadBalancerTargetGroupsMetadata
autoscaling:DescribeMetricCollectionTypesMetadata
autoscaling:DescribeNotificationConfigurationsMetadata
autoscaling:DescribePoliciesMetadata
autoscaling:DescribeScalingActivitiesMetadata
autoscaling:DescribeScalingPlanResourcesMetadata
autoscaling:DescribeScalingPlansMetadata
autoscaling:DescribeScalingProcessTypesMetadata
autoscaling:DescribeScheduledActionsMetadata
autoscaling:DescribeTagsMetadata
autoscaling:DescribeTerminationPolicyTypesMetadata
autoscaling:DescribeTriggersMetadata
autoscaling:DescribeWarmPoolMetadata
aws-marketplace:GetEntitlementsMetadata
aws-marketplace:ViewSubscriptionsMetadata
cloudwatch:DescribeAlarmHistoryMetadata
cloudwatch:DescribeAlarmsMetadata
cloudwatch:DescribeAlarmsForMetricMetadata
cloudwatch:GetMetricDataMetadata
cloudwatch:GetMetricStatisticsMetadata
cloudwatch:ListMetricsMetadata
ec2:DescribeAccountAttributesMetadata
ec2:DescribeAddressesMetadata
ec2:DescribeAddressesAttributeMetadata
ec2:DescribeAddressTransfersMetadata
ec2:DescribeAvailabilityZonesMetadata
ec2:DescribeAwsNetworkPerformanceMetricSubscriptionsMetadata
ec2:DescribeBundleTasksMetadata
ec2:DescribeCapacityBlockOfferingsMetadata
ec2:DescribeCapacityReservationFleetsMetadata
ec2:DescribeCapacityReservationsMetadata
ec2:DescribeCarrierGatewaysMetadata
ec2:DescribeClassicLinkInstancesMetadata
ec2:DescribeConversionTasksMetadata
ec2:DescribeElasticGpusMetadata
ec2:DescribeExportImageTasksMetadata
ec2:DescribeExportTasksMetadata
ec2:DescribeFastLaunchImagesMetadata
ec2:DescribeFastSnapshotRestoresMetadata
ec2:DescribeFleetHistoryMetadata
ec2:DescribeFleetInstancesMetadata
ec2:DescribeFleetsMetadata
ec2:DescribeFpgaImageAttributeMetadata
ec2:DescribeFpgaImagesMetadata
ec2:DescribeHostReservationOfferingsMetadata
ec2:DescribeHostReservationsMetadata
ec2:DescribeHostsMetadata
ec2:DescribeIamInstanceProfileAssociationsMetadata
ec2:DescribeIdentityIdFormatMetadata
ec2:DescribeIdFormatMetadata
ec2:DescribeImageAttributeMetadata
ec2:DescribeImagesMetadata
ec2:DescribeImportImageTasksMetadata
ec2:DescribeImportSnapshotTasksMetadata
ec2:DescribeInstanceAttributeMetadata
ec2:DescribeInstanceConnectEndpointsMetadata
ec2:DescribeInstanceCreditSpecificationsMetadata
ec2:DescribeInstanceEventNotificationAttributesMetadata
ec2:DescribeInstanceEventWindowsMetadata
ec2:DescribeInstancesMetadata
ec2:DescribeInstanceStatusMetadata
ec2:DescribeInstanceTopologyMetadata
ec2:DescribeInstanceTypeOfferingsMetadata
ec2:DescribeInstanceTypesMetadata
ec2:DescribeIpamByoasnMetadata
ec2:DescribeIpamResourceDiscoveriesMetadata
ec2:DescribeIpamResourceDiscoveryAssociationsMetadata
ec2:DescribeIpv6PoolsMetadata
ec2:DescribeKeyPairsMetadata
ec2:DescribeLaunchTemplatesMetadata
ec2:DescribeLaunchTemplateVersionsMetadata
ec2:DescribeLicensesMetadata
ec2:DescribeLocalGatewayRouteTablePermissionsMetadata
ec2:DescribeLockedSnapshotsMetadata
ec2:DescribeMovingAddressesMetadata
ec2:DescribeNetworkInterfaceAttributeMetadata
ec2:DescribeNetworkInterfacePermissionsMetadata
ec2:DescribeNetworkInterfacesMetadata
ec2:DescribePlacementGroupsMetadata
ec2:DescribePublicIpv4PoolsMetadata
ec2:DescribeRegionsMetadata
ec2:DescribeReplaceRootVolumeTasksMetadata
ec2:DescribeReservedInstancesMetadata
ec2:DescribeReservedInstancesListingsMetadata
ec2:DescribeReservedInstancesModificationsMetadata
ec2:DescribeReservedInstancesOfferingsMetadata
ec2:DescribeScheduledInstanceAvailabilityMetadata
ec2:DescribeScheduledInstancesMetadata
ec2:DescribeSecurityGroupReferencesMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSnapshotAttributeMetadata
ec2:DescribeSnapshotsMetadata
ec2:DescribeSnapshotTierStatusMetadata
ec2:DescribeSpotDatafeedSubscriptionMetadata
ec2:DescribeSpotFleetInstancesMetadata
ec2:DescribeSpotFleetRequestHistoryMetadata
ec2:DescribeSpotFleetRequestsMetadata
ec2:DescribeSpotInstanceRequestsMetadata
ec2:DescribeSpotPriceHistoryMetadata
ec2:DescribeStaleSecurityGroupsMetadata
ec2:DescribeStoreImageTasksMetadata
ec2:DescribeTagsMetadata
ec2:DescribeTransitGatewayPolicyTablesMetadata
ec2:DescribeTransitGatewayRouteTableAnnouncementsMetadata
ec2:DescribeVerifiedAccessEndpointsMetadata
ec2:DescribeVerifiedAccessGroupsMetadata
ec2:DescribeVerifiedAccessInstanceLoggingConfigurationsMetadata
ec2:DescribeVerifiedAccessInstancesMetadata
ec2:DescribeVerifiedAccessInstanceWebAclAssociationsMetadata
ec2:DescribeVerifiedAccessTrustProvidersMetadata
ec2:DescribeVolumeAttributeMetadata
ec2:DescribeVolumesMetadata
ec2:DescribeVolumesModificationsMetadata
ec2:DescribeVolumeStatusMetadata
ec2:GetAssociatedEnclaveCertificateIamRolesMetadata
ec2:GetAwsNetworkPerformanceDataMetadata
ec2:GetCapacityReservationUsageMetadata
ec2:GetConsoleOutputMetadata
ec2:GetConsoleScreenshotMetadata
ec2:GetDefaultCreditSpecificationMetadata
ec2:GetEbsDefaultKmsKeyIdMetadata
ec2:GetEbsEncryptionByDefaultMetadata
ec2:GetGroupsForCapacityReservationMetadata
ec2:GetHostReservationPurchasePreviewMetadata
ec2:GetImageBlockPublicAccessStateMetadata
ec2:GetInstanceTypesFromInstanceRequirementsMetadata
ec2:GetInstanceUefiDataMetadata
ec2:GetIpamDiscoveredAccountsMetadata
ec2:GetIpamDiscoveredPublicAddressesMetadata
ec2:GetIpamDiscoveredResourceCidrsMetadata
ec2:GetLaunchTemplateDataMetadata
ec2:GetReservedInstancesExchangeQuoteMetadata
ec2:GetResourcePolicyMetadata
ec2:GetSecurityGroupsForVpcMetadata
ec2:GetSerialConsoleAccessStatusMetadata
ec2:GetSnapshotBlockPublicAccessStateMetadata
ec2:GetSpotPlacementScoresMetadata
ec2:GetTransitGatewayPolicyTableAssociationsMetadata
ec2:GetTransitGatewayPolicyTableEntriesMetadata
ec2:GetVerifiedAccessEndpointPolicyMetadata
ec2:GetVerifiedAccessGroupPolicyMetadata
ec2:GetVerifiedAccessInstanceWebAclMetadata
ec2:GetVpnTunnelReplacementStatusMetadata
ec2:ListImagesInRecycleBinMetadata
ec2:ListSnapshotsInRecycleBinMetadata
elasticloadbalancing:DescribeAccountLimitsMetadata
elasticloadbalancing:DescribeInstanceHealthMetadata
elasticloadbalancing:DescribeListenerCertificatesMetadata
elasticloadbalancing:DescribeListenersMetadata
elasticloadbalancing:DescribeLoadBalancerAttributesMetadata
elasticloadbalancing:DescribeLoadBalancerPoliciesMetadata
elasticloadbalancing:DescribeLoadBalancerPolicyTypesMetadata
elasticloadbalancing:DescribeLoadBalancersMetadata
elasticloadbalancing:DescribeRulesMetadata
elasticloadbalancing:DescribeSSLPoliciesMetadata
elasticloadbalancing:DescribeTagsMetadata
elasticloadbalancing:DescribeTargetGroupAttributesMetadata
elasticloadbalancing:DescribeTargetGroupsMetadata
elasticloadbalancing:DescribeTargetHealthMetadata
health:DescribeEventAggregatesMetadata
kms:ListAliasesMetadata