only requires DescribeTags permission
Merge pull request #72 from metamx/leastprivs

only requires DescribeTags permission