3 actions in the resource-explorer service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to retrieve the identifiers of the resources in the AWS account
Grants permission to retrieve the resource types currently supported by Tag Editor
Grants permission to retrieve the tags attached to the specified resource identifiers