Mods
AWS

IAM Role: AWS/Transfer for SFTP/Metadata

PermissionGrant
transfer:DescribeServerMetadata
transfer:DescribeUserMetadata
transfer:ListServersMetadata
transfer:ListTagsForResourceMetadata
transfer:ListUsersMetadata
iam:ListRolesMetadata
iam:ListPoliciesMetadata
s3:ListAllMyBucketsMetadata