We should document what IAM permissions (and the corresponding other permissions in other cloud providers) to utilize GET. As an example of this, OpsTrace include this in their documentation as follows: https://opstrace.com/docs/references/aws#required-permissions