PermissionsThe Enforce GCP Compute Engine Instances Use Only Approved Images policy pack requires 2 permissions:compute.instances.deletecompute.instances.stop