Mods
AWS

IAM Role: AWS/Simple DB/ReadOnly

PermissionGrant
sdb:GetAttributesReadOnly
sdb:SelectReadOnly
sdb:DomainMetadataMetadata
sdb:ListDomainsMetadata