SLS tagging CloudFormation issues

[ryan-roemer]

From #33

---

2: my developer account wants the lambda tag permissions as well, though this only errors in cloudformation, not sls cli

the tags seem to be cloudformation specific, though I'm not sure how the STAGE tag gets there, since I only inject that into the environment (cf template confirms this)

perhaps the cd-lambdas group should have those tag permissions by default?

¯\_(ツ)_/¯

[ryan-roemer]

Failed to set tags on AWS::Lambda::Function. IAM permissions lambda:ListTags, lambda:TagResource and lambda:UntagResource are required to tag AWS::Lambda::Function resources and to propagate stack level tags.