Mods
AWS

IAM Role: AWS/IAM/Metadata

PermissionGrant
access-analyzer:GetAccessPreviewMetadata
access-analyzer:GetAnalyzedResourceMetadata
access-analyzer:GetAnalyzerMetadata
access-analyzer:GetArchiveRuleMetadata
access-analyzer:GetFindingMetadata
access-analyzer:GetGeneratedPolicyMetadata
access-analyzer:ListAccessPreviewFindingsMetadata
access-analyzer:ListAccessPreviewsMetadata
access-analyzer:ListAnalyzedResourcesMetadata
access-analyzer:ListAnalyzersMetadata
access-analyzer:ListArchiveRulesMetadata
access-analyzer:ListFindingsMetadata
access-analyzer:ListPolicyGenerationsMetadata
access-analyzer:ListTagsForResourceMetadata
iam:GenerateCredentialReportMetadata
iam:GenerateServiceLastAccessedDetailsMetadata
iam:GetAccessKeyLastUsedMetadata
iam:GetAccountAuthorizationDetailsMetadata
iam:GetAccountPasswordPolicyMetadata
iam:GetAccountSummaryMetadata
iam:GetContextKeysForCustomPolicyMetadata
iam:GetContextKeysForPrincipalPolicyMetadata
iam:GetCredentialReportMetadata
iam:GetGroupMetadata
iam:GetGroupPolicyMetadata
iam:GetInstanceProfileMetadata
iam:GetLoginProfileMetadata
iam:GetOpenIDConnectProviderMetadata
iam:GetOrganizationsAccessReportMetadata
iam:GetPolicyMetadata
iam:GetPolicyVersionMetadata
iam:GetRoleMetadata
iam:GetRolePolicyMetadata
iam:GetSAMLProviderMetadata
iam:GetSSHPublicKeyMetadata
iam:GetServerCertificateMetadata
iam:GetServiceLastAccessedDetailsMetadata
iam:GetServiceLastAccessedDetailsWithEntitiesMetadata
iam:GetServiceLinkedRoleDeletionStatusMetadata
iam:GetUserMetadata
iam:GetUserPolicyMetadata
iam:ListAccessKeysMetadata
iam:ListAccountAliasesMetadata
iam:ListAttachedGroupPoliciesMetadata
iam:ListAttachedRolePoliciesMetadata
iam:ListAttachedUserPoliciesMetadata
iam:ListEntitiesForPolicyMetadata
iam:ListGroupPoliciesMetadata
iam:ListGroupsMetadata
iam:ListGroupsForUserMetadata
iam:ListInstanceProfileTagsMetadata
iam:ListInstanceProfilesMetadata
iam:ListInstanceProfilesForRoleMetadata
iam:ListMFADeviceTagsMetadata
iam:ListMFADevicesMetadata
iam:ListOpenIDConnectProviderTagsMetadata
iam:ListOpenIDConnectProvidersMetadata
iam:ListPoliciesMetadata
iam:ListPoliciesGrantingServiceAccessMetadata
iam:ListPolicyTagsMetadata
iam:ListPolicyVersionsMetadata
iam:ListRolePoliciesMetadata
iam:ListRoleTagsMetadata
iam:ListRolesMetadata
iam:ListSAMLProviderTagsMetadata
iam:ListSAMLProvidersMetadata
iam:ListSSHPublicKeysMetadata
iam:ListServerCertificateTagsMetadata
iam:ListServerCertificatesMetadata
iam:ListServiceSpecificCredentialsMetadata
iam:ListSigningCertificatesMetadata
iam:ListUserPoliciesMetadata
iam:ListUserTagsMetadata
iam:ListUsersMetadata
iam:ListVirtualMFADevicesMetadata
iam:SimulateCustomPolicyMetadata
iam:SimulatePrincipalPolicyMetadata
organizations:DescribeOrganizationMetadata
sts:DecodeAuthorizationMessageMetadata