Mods
AWS

IAM Role: AWS/WorkSpaces/Operator

PermissionGrant
workspaces:CopyWorkspaceImageOperator
workspaces:CreateTagsOperator
workspaces:DeleteTagsOperator
workspaces:ModifyWorkspacePropertiesOperator
workspaces:ModifyWorkspaceStateOperator
workspaces:RebootWorkspacesOperator
workspaces:RebuildWorkspacesOperator
workspaces:StartWorkspacesOperator
workspaces:StopWorkspacesOperator
iam:GetRoleMetadata
workspaces:DescribeAccountMetadata
workspaces:DescribeAccountModificationsMetadata
workspaces:DescribeClientPropertiesMetadata
workspaces:DescribeIpGroupsMetadata
workspaces:DescribeTagsMetadata
workspaces:DescribeWorkspaceBundlesMetadata
workspaces:DescribeWorkspaceDirectoriesMetadata
workspaces:DescribeWorkspaceImagesMetadata
workspaces:DescribeWorkspaceSnapshotsMetadata
workspaces:DescribeWorkspacesMetadata
workspaces:DescribeWorkspacesConnectionStatusMetadata
workspaces:ListAvailableManagementCidrRangesMetadata