Permission and Variables

I have looked at this script and what is not clear between this and the defender documentation is the use of the variables and their interdependencies.

Also are the IAM permissions given actually required, it appears to be granting a high level of access on some roles.

Compare the script with the Defender for Cloud documentation, focusing first on the variables and their interdependencies. Review the IAM permissions assigned to each role and document which are required; the work is done when the variable relationships and permission rationale are clear and aligned across both sources.

Written by the indexing model from the issue text.