IAM Role: AWS/Shield/Metadata
| Permission | Grant |
|---|---|
| iam:GetRole | Metadata |
| iam:ListAttachedRolePolicies | Metadata |
| s3:GetBucketPolicy | Metadata |
| shield:DescribeAttack | Metadata |
| shield:DescribeDRTAccess | Metadata |
| shield:DescribeEmergencyContactSettings | Metadata |
| shield:DescribeProtection | Metadata |
| shield:DescribeSubscription | Metadata |
| shield:GetSubscriptionState | Metadata |
| shield:ListAttacks | Metadata |
| shield:ListProtections | Metadata |