Mods
AWS

IAM Role: AWS/FMS/Metadata

PermissionGrant
fms:GetAdminAccountMetadata
fms:GetAppsListMetadata
fms:GetComplianceDetailMetadata
fms:GetNotificationChannelMetadata
fms:GetPolicyMetadata
fms:GetProtectionStatusMetadata
fms:GetProtocolsListMetadata
fms:GetViolationDetailsMetadata
fms:ListAppsListsMetadata
fms:ListComplianceStatusMetadata
fms:ListMemberAccountsMetadata
fms:ListPoliciesMetadata
fms:ListProtocolsListsMetadata
fms:ListTagsForResourceMetadata