Permit S3 tagging for CloudFormation

Avoid errors like this:
```
Resource handler returned message: "Encountered a permissions error performing a tagging operation, please add required tag permissions.
See https://repost.aws/knowledge-center/cloudformation-tagging-permission-error for how to resolve.
Resource handler returned message: "Access Denied (Service: S3, Status Code: 403, Request ID: GDYGC3TFW6806N9H, Extended Request ID: ...)"" (RequestToken: ..., HandlerErrorCode: UnauthorizedTaggingOperation)
```

src/main/resources/iam-policy.json

@@ -48,6 +48,7 @@
         "s3:DeleteObject",
         "s3:GetObject",
         "s3:ListBucket",
+        "s3:PutBucketTagging",
         "s3:PutObject",
         "s3:GetBucketPolicy",
         "s3:PutBucketPolicy",