PermissionsThe Enforce Flow Logging is Enabled for GCP VPC Subnetworks policy pack requires 1 permission:compute.subnetworks.update