Don't assume every AWS VPC has tags

The default VPC has no tags (by default), so we should use get()
Merge pull request #2652 from justinsb/default_vpc_has_no_tags

Don't assume every AWS VPC has tags