Add a missing permission in the service role

Author: hcho3

templates/service-role.yml

@@ -180,7 +180,8 @@ Resources:
                 "lambda:AddPermission",
                 "lambda:RemovePermission",
                 "lambda:DeleteFunction",
-                "lambda:InvokeFunction"
+                "lambda:InvokeFunction",
+                "lambda:TagResource"
               ],
               "Resource": "arn:aws:lambda:*:*:function:*"
             },
@@ -304,4 +305,4 @@ Resources:
               "Resource": "arn:aws:events:*:*:rule/*"
             }
           ]
-        }
+        }