PermissionsThe Enforce Encryption in Transit Is Enabled for AWS Redshift Clusters policy pack requires 2 permissions:redshift:ModifyClusterParameterGroupredshift:RebootCluster