PermissionsThe Enforce Encryption at Rest Is Enabled for GCP Storage Buckets policy pack requires 1 permission:storage.buckets.update