Mods
AWS

IAM Role: AWS/Resource Groups/Operator

PermissionGrant
resource-groups:TagOperator
resource-groups:UntagOperator
resource-groups:GetGroupMetadata
resource-groups:GetGroupConfigurationMetadata
resource-groups:GetGroupQueryMetadata
resource-groups:GetTagsMetadata
resource-groups:ListGroupResourcesMetadata
resource-groups:ListGroupsMetadata
resource-groups:SearchResourcesMetadata