You can also use IAM Access Analyzer to help identify the required permissions for the IAM execution role

Explanation

You can also use IAM Access Analyzer to help identify the required permissions for the IAM execution role. IAM Access Analyzer reviews your AWS CloudTrail logs over the date range that you specify and generates a policy template with only the permissions that the function used during that time.