Support identifying VPC by tags

**Is your feature request related to a problem?**
For cases where access to AWS metadata is blocked and the VPC ID is not known at deploy time, options to infer the VPC ID are limited.

**Describe the solution you'd like**
I would like to request a third option, to specify tags used to filter VPC IDs via the EC2 `DescribeVpcs..` API set.

**Describe alternatives you've considered**
N/A
