Mods
AWS

IAM Role: AWS/Signer/Operator

PermissionGrant
signer:TagResourceOperator
signer:UntagResourceOperator
s3:GetObjectVersionMetadata
s3:ListAllMyBucketsMetadata
s3:ListBucketMetadata
signer:DescribeSigningJobMetadata
signer:GetSigningPlatformMetadata
signer:GetSigningProfileMetadata
signer:ListProfilePermissionsMetadata
signer:ListSigningJobsMetadata
signer:ListSigningPlatformsMetadata
signer:ListSigningProfilesMetadata
signer:ListTagsForResourceMetadata