rds-db:* and organizations

Hi, I can't figure out which scp is Disallowing access to de rds-db:*... We have the Basic, out of the Box scp's enabled. Nothing else. The IAM policy generator states:

denied   Denied by AWS Organizations.

And this also reflects in the IAM RDS connection:

FATAL:  PAM authentication failed for user

Which according to the documentation indeed states the thing that the Policy generator finds... https://aws.amazon.com/premiumsupport/knowledge-center/rds-postgresql-connect-using-iam/