Mods
AWS

IAM Role: AWS/Route 53 Resolver/Operator

PermissionGrant
route53resolver:TagResourceOperator
route53resolver:UntagResourceOperator
ec2:DescribeAvailabilityZonesMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSubnetsMetadata
route53resolver:GetResolverEndpointMetadata
route53resolver:GetResolverRuleMetadata
route53resolver:GetResolverRuleAssociationMetadata
route53resolver:GetResolverRulePolicyMetadata
route53resolver:ListResolverEndpointIpAddressesMetadata
route53resolver:ListResolverEndpointsMetadata
route53resolver:ListResolverRuleAssociationsMetadata
route53resolver:ListResolverRulesMetadata
route53resolver:ListTagsForResourceMetadata