PermissionsThe Enforce AWS IAM Policies Do Not Have Admin Privileges policy pack requires 3 permissions:iam:CreatePolicyVersioniam:DeletePolicyVersioniam:ListPolicyVersions