Permissions for @turbot/aws

Taking a look at permissions and associated grant levels for each permission for AWS:

PermissionGrant LevelHelp
account:DisableRegionOwnerOwners can disable an AWS region.
account:EnableRegionOwnerOwners can enable an AWS region.
account:GetAccountInformationMetadata
account:GetAlternateContactMetadata
account:GetChallengeQuestionsMetadata
account:GetContactInformationMetadata
account:GetRegionOptStatusMetadata
account:ListRegionsMetadata
account:PutAlternateContactAdminUpdate account alternate contacts.
iam:CreateAccountAliasOwnerOwners can manage the AWS account alias.
iam:DeleteAccountAliasOwnerOwners can manage the AWS account alias.
iam:ListAccountAliasesMetadata