Why can't I bind a public address range at creation or delete one that is already bound?

Binding a public address range during creation, or deleting a bound range fails due to insufficient permissions.

You can't create or delete the public address range.

Insufficient IAM role or required IAM actions.

To perform these tasks, you must first have either the Administrator or Editor IAM role. To create a public address range, the action is.public-address-range.public-address-range.create is required. To delete a public address range, is.public-address-range.public-address-range.delete is necessary. If the public address range is to be bound during creation, or is already bound when you want to delete the range, you must also have the is.vpc.vpc.operate permission.

For more information, see IAM roles and actions.