Toxic Combinations show potential attack paths. CloudGuard shows Toxic Combinations automatically. You do not need to configure a policy to show Toxic Combinations.