Mods
AWS

IAM Role: AWS/MWAA/Metadata

PermissionGrant
airflow:GetEnvironmentMetadata
airflow:ListEnvironmentsMetadata
airflow:ListTagsForResourceMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSubnetsMetadata
ec2:DescribeVpcsMetadata
iam:ListRolesMetadata
kms:ListAliasesMetadata
s3:GetBucketLocationMetadata
s3:ListAllMyBucketsMetadata
s3:ListBucketMetadata