backport of commit c38c576 (#28828)

Co-authored-by: Martin <[email protected]>

Author: hc-github-team-secure-vault-core

website/content/docs/secrets/aws.mdx

@@ -243,7 +243,8 @@ permissions Vault needs:
         "iam:ListUserPolicies",
         "iam:PutUserPolicy",
         "iam:AddUserToGroup",
-        "iam:RemoveUserFromGroup"
+        "iam:RemoveUserFromGroup",
+        "iam:TagUser"
       ],
       "Resource": ["arn:aws:iam::ACCOUNT-ID-WITHOUT-HYPHENS:user/vault-*"]
     }