Mods
AWS

IAM Role: AWS/Secrets Manager/Operator

PermissionGrant
secretsmanager:TagResourceOperator
secretsmanager:UntagResourceOperator
secretsmanager:DescribeSecretMetadata
secretsmanager:GetResourcePolicyMetadata
secretsmanager:ListSecretVersionIdsMetadata