Add ec2:CreateTags to single-primary permission policy

The ability to create tags is required when spinning up a single-primary
stack.

Change-Id: Ie435bae31645e3d3c222c6ac475f74c7620ca342

single-primary/resources/permission.policy.json

diff --git a/single-primary/resources/permission.policy.json b/single-primary/resources/permission.policy.json
index b020cff..3c469e9 100644
--- a/single-primary/resources/permission.policy.json
+++ b/single-primary/resources/permission.policy.json
@@ -35,6 +35,7 @@
         "ec2:CreateRouteTable",
         "ec2:CreateSecurityGroup",
         "ec2:CreateSubnet",
+        "ec2:CreateTags",
         "ec2:CreateVolume",
         "ec2:CreateVpc",
         "ec2:DeleteInternetGateway",