Mods
AWS

IAM Role: AWS/Secrets Manager/Metadata

PermissionGrant
secretsmanager:DescribeSecretMetadata
secretsmanager:GetResourcePolicyMetadata
secretsmanager:ListSecretVersionIdsMetadata