PermissionsThe Enforce AWS IAM Roles Restrict Access policy pack requires 1 permission:iam:UpdateAssumeRolePolicy