Mods
AWS

IAM Role: AWS/Route 53 Resolver/Metadata

PermissionGrant
ec2:DescribeAvailabilityZonesMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSubnetsMetadata
route53resolver:GetResolverEndpointMetadata
route53resolver:GetResolverRuleMetadata
route53resolver:GetResolverRuleAssociationMetadata
route53resolver:GetResolverRulePolicyMetadata
route53resolver:ListResolverEndpointIpAddressesMetadata
route53resolver:ListResolverEndpointsMetadata
route53resolver:ListResolverRuleAssociationsMetadata
route53resolver:ListResolverRulesMetadata
route53resolver:ListTagsForResourceMetadata