From @PKehnel
The existing IAM Service: VPC Infrastructure Services is not documented in: https://cloud.ibm.com/docs/account?topic=account-iam-service-roles-actions#virtual-private-cloud

It contains uncommon service access attributes, like Bare Metal Advances Network Operator, for which we require API names.