fix: Move vpce:AllowMultiRegion to statement without tag condition (#144)

Author: ciiiii

modules/aws/vendor-access/files/provision1.json.tpl

@@ -13,7 +13,8 @@
       "Sid": "EndpointConnectionAccess",
       "Effect": "Allow",
       "Action": [
-        "ec2:*VpcEndpointConnections"
+        "ec2:*VpcEndpointConnections",
+        "vpce:AllowMultiRegion"
       ],
       "Resource": "*"
     },
@@ -44,7 +45,6 @@
         "ec2:ReplaceRouteTableAssociation",
         "ec2:CreateSubnet",
         "ec2:CreateVpcEndpoint",
-        "vpce:AllowMultiRegion",
         "ec2:DescribeVpcPeeringConnections",
         "ec2:CreateVpcPeeringConnection",
         "ec2:DeleteVpcPeeringConnection"