It’d be nifty if the syncing integrations with AWS (secrets manager and parameter store) allowed for providing an arbitrary set of resource tags to apply to all resources created by that integration. I’ve got 2 concrete use cases in mind:
- Billing/General Management - Table stakes for DevOps housekeeping
- AWS Copilot - Requires tags on created parameters for the sake of permissioning (the IAM policies it grants to ECS tasks limit access to the Parameter Store using resource tags, so they are required)
Hope this finds you well, and I’ve already got CFN workarounds for both cases above, so no biggie! Just musing aloud