It looks like this is still an issue. I’m unable to complete this exercise due to the following:
An error occurred (AccessDenied) when calling the CreateDBInstance operation: User: arn:aws:iam::739275466503:user/kk_labs_user_745201 is not authorized to perform: rds:CreateDBInstance on resource: arn:aws:rds:us-east-1:739275466503:db:xfusion-rds with an explicit deny in a service control policy