IAM Role: AWS/Tagging/Admin
| Permission | Grant |
|---|---|
| tag:StartReportCreation | Admin |
| tag:TagResources | Operator |
| tag:UntagResources | Operator |
| cloudformation:DescribeStacks | Metadata |
| cloudformation:ListStackResources | Metadata |
| resource-explorer:ListResourceTypes | Metadata |
| tag:DescribeReportCreation | Metadata |
| tag:GetComplianceSummary | Metadata |
| tag:GetResources | Metadata |
| tag:GetTagKeys | Metadata |
| tag:GetTagValues | Metadata |