Permissions
The Enforce Default AWS VPCs Are Deleted policy pack requires 14 permissions:
ec2:DeleteInternetGateway
ec2:DeleteSecurityGroup
ec2:DeleteSubnet
ec2:DeleteVpc
ec2:DescribeDhcpOptions
ec2:DescribeInstances
ec2:DescribeInternetGateways
ec2:DescribeNetworkAcls
ec2:DescribeNetworkInterfaces
ec2:DescribeRouteTables
ec2:DescribeSecurityGroups
ec2:DescribeSubnets
ec2:DescribeVpcPeeringConnections
ec2:DetachInternetGateway