aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

AWS::IAM::ManagedPolicy - Support for tags

Open
#819 26 comments 103 reactions 0 assignees View on GitHub
Coverage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

Scope of request: AWS::IAM::ManagedPolicy does not support Tags property so cannot be tagged in CloudFormation templates. Tags are supported for IAM managed policies in the API and Console, so support for Tags on IAM policies is inconsistent.

Expected behavior: Tags property is supported by CloudFormation for the AWS::IAM::ManagedPolicy resource type, allowing AWS::IAM::ManagedPolicy resource types to be tagged in CloudFormation templates.

Links to existing API doc:
- (tags supported here) https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html
- (no tag support here) https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html

Category tag: Security

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::IAM::ManagedPolicy resource documentation and compare it with the linked IAM CreatePolicy API documentation, focusing on the existing Tags support. Done means CloudFormation accepts Tags for this resource type and allows managed policies to be tagged consistently with the API and console.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.