PermissionsThe Enforce AWS RDS DB Instances Use Specific Engines and Instance Classes policy pack requires 2 permissions:rds:DeleteDBInstancerds:StopDBInstance