PermissionsThe Deny all AWS IAM actions from Unapproved Networks policy pack requires 2 permissions:iam:DeleteRolePermissionsBoundaryiam:PutRolePermissionsBoundary