Mods
AWS

IAM Role: AWS/Resource Access Manager/Operator

PermissionGrant
ram:AcceptResourceShareInvitationOperator
ram:AssociateResourceShareOperator
ram:AssociateResourceSharePermissionOperator
ram:DisassociateResourceShareOperator
ram:DisassociateResourceSharePermissionOperator
ram:EnableSharingWithAwsOrganizationOperator
ram:TagResourceOperator
ram:UntagResourceOperator
ram:GetPermissionMetadata
ram:GetResourcePoliciesMetadata
ram:GetResourceShareAssociationsMetadata
ram:GetResourceShareInvitationsMetadata
ram:GetResourceSharesMetadata
ram:ListPendingInvitationResourcesMetadata
ram:ListPermissionsMetadata
ram:ListPrincipalsMetadata
ram:ListResourceSharePermissionsMetadata
ram:ListResourcesMetadata