Permissions
The Enforce Unapproved Traffic is Blocked for AWS VPC Security Groups policy pack requires 2 permissions:
ec2:RevokeSecurityGroupEgressec2:RevokeSecurityGroupIngress
Policy Packs
Enforce Unapproved Traffic is Blocked for AWS VPC Security Groups