Permissions

The Enforce AWS VPC Default Security Groups Are Deleted policy pack requires 1 permission:

ec2:DeleteSecurityGroup