Mods
AWS

IAM Role: AWS/Transfer for SFTP/Admin

PermissionGrant
transfer:CreateServerAdmin
transfer:CreateUserAdmin
transfer:DeleteServerAdmin
transfer:DeleteSshPublicKeyAdmin
transfer:DeleteUserAdmin
transfer:ImportSshPublicKeyAdmin
transfer:UpdateServerAdmin
transfer:UpdateUserAdmin
iam:PassRoleAdmin
transfer:StartServerOperator
transfer:StopServerOperator
transfer:TagResourceOperator
transfer:UntagResourceOperator
transfer:DescribeServerMetadata
transfer:DescribeUserMetadata
transfer:ListServersMetadata
transfer:ListTagsForResourceMetadata
transfer:ListUsersMetadata
iam:ListRolesMetadata
iam:ListPoliciesMetadata
s3:ListAllMyBucketsMetadata