Mods
Azure

IAM Role: Azure/Application Gateway/readonly

PermissionGrant
microsoft.network/applicationgateways/backendhealth/actionreadonly
microsoft.network/applicationgateways/providers/microsoft.insights/logdefinitions/readreadonly
microsoft.network/applicationgateways/readmetadata
microsoft.network/applicationgateways/getbackendhealthondemand/actionmetadata
microsoft.network/applicationgateways/effectivenetworksecuritygroups/actionmetadata
microsoft.network/applicationgateways/effectiveroutetable/actionmetadata
microsoft.network/applicationgateways/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata