Merge changes Ie131d7c4,I705f37c8,I7b79c0df,I588b776f,I30b55c37, ...

* changes:
  dual-primary: separate HTTP from SSH traffic
  Remove unused ReplicaServiceStackName parameter
  Removed unused LOAD_BALANCER_STACK_NAME variable
  primary-replica: separate HTTP from SSH traffic
  Single-primary: separate HTTP from SSH traffic
  Do not use static naming for TargetGroup and LoadBalancers
diff --git a/single-primary/resources/permission.policy.json b/single-primary/resources/permission.policy.json
index b020cff..3c469e9 100644
--- a/single-primary/resources/permission.policy.json
+++ b/single-primary/resources/permission.policy.json
@@ -35,6 +35,7 @@
         "ec2:CreateRouteTable",
         "ec2:CreateSecurityGroup",
         "ec2:CreateSubnet",
+        "ec2:CreateTags",
         "ec2:CreateVolume",
         "ec2:CreateVpc",
         "ec2:DeleteInternetGateway",