only requires DescribeTags permission
Merge pull request #1 from metamx/leastprivs

only requires DescribeTags permission