trustedadvisor:DescribeServiceMetadata is a Read access-level action in the trustedadvisor service. Grants permission to view information about organizational view reports, such as the AWS Regions, check categories, check names, and resource statuses
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows trustedadvisor:DescribeServiceMetadata. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowTrustedadvisorDescribeServiceMetadata",
"Effect": "Allow",
"Action": "trustedadvisor:DescribeServiceMetadata",
"Resource": "*"
}
]
}