Mods
GCP

IAM Role: GCP/Secret Manager/Metadata

PermissionGrant
resourcemanager.projects.getMetadata
resourcemanager.projects.listMetadata
secretmanager.locations.getMetadata
secretmanager.locations.listMetadata
secretmanager.secrets.getMetadata
secretmanager.secrets.getIamPolicyMetadata
secretmanager.secrets.listMetadata
secretmanager.versions.getMetadata
secretmanager.versions.listMetadata