PermissionsThe Enforce AWS RDS DB Instances Are Not Publicly Accessible policy pack requires 1 permission:rds:ModifyDBInstance