PermissionsThe Enforce Rotation Is Enabled for AWS KMS Keys policy pack requires 2 permissions:kms:DisableKeyRotationkms:EnableKeyRotation