Add logs:TagLogGroup permission to the log group role (#1085)

* Add logs:TagLogGroup permission to the log group role used by the custom resource to create log groups

* Add trailing comma

Co-authored-by: Drew Dresser <adresser@flagshippioneering.com>

Author: drewdresser

src/deployments/cdk/src/deployments/iam/log-group-role.ts

@@ -46,6 +46,7 @@ async function createRole(stack: AccountStack) {
         'logs:DeleteRetentionPolicy',
         'logs:DescribeLogGroups',
         'logs:AssociateKmsKey',
+        'logs:TagLogGroup',
       ],
       resources: ['*'],
     }),