PermissionsThe Enforce AWS VPC Elastic IPs Are Associated policy pack requires 2 permissions:ec2:DisassociateAddressec2:ReleaseAddress