PermissionsThe Enforce AWS IAM Access Keys Are Not Older Than 90 Days policy pack requires 2 permissions:iam:DeleteAccessKeyiam:UpdateAccessKey