Mods
AWS

IAM Role: AWS/Tagging/Metadata

PermissionGrant
cloudformation:DescribeStacksMetadata
cloudformation:ListStackResourcesMetadata
resource-explorer:ListResourceTypesMetadata
tag:DescribeReportCreationMetadata
tag:GetComplianceSummaryMetadata
tag:GetResourcesMetadata
tag:GetTagKeysMetadata
tag:GetTagValuesMetadata