Fix AWS action name (#27205)

The action name is `tag:GetResources`, not `tags:GetResources`. This creates a confusing error message that can have the user add the wrong permission to the IAM role.

pkg/tsdb/cloudwatch/metric_find_query.go

@@ -694,7 +694,7 @@ func (e *cloudWatchExecutor) resourceGroupsGetResources(region string, filters [
 			resp.ResourceTagMappingList = append(resp.ResourceTagMappingList, page.ResourceTagMappingList...)
 			return !lastPage
 		}); err != nil {
-		return nil, fmt.Errorf("failed to call tags:GetResources, %w", err)
+		return nil, fmt.Errorf("failed to call tag:GetResources, %w", err)
 	}
 
 	return &resp, nil