The task is to create a RDS instance but the IAM user provided does not have permissions to create RDS instance as shown below
Your request to create DB instance devops-rds didn’t work.
User: arn:aws:iam::704152243091:user/kk_labs_user_483821 is not authorized to perform: rds:CreateDBInstance on resource: arn:aws:rds:us-east-1:704152243091:db:devops-rds with an explicit deny in a service control policy: arn:aws:organizations::487349550619:policy/o-0mgf8ua334/service_control_policy/p-icntgjha

