PermissionsThe AWS CIS v3.0.0 - Section 5 - Networking policy pack requires 4 permissions:ec2:DeleteNetworkAclEntryec2:ModifyInstanceMetadataDefaultsec2:RevokeSecurityGroupEgressec2:RevokeSecurityGroupIngress