Added tag to iam policy

Author: akhil-sumologic

aws/cloudtrail/cloudtrail.tf

@@ -88,6 +88,7 @@ resource "aws_iam_policy" "iam_policy" {
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {
     BUCKET_NAME = local.bucket_name
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "source-role-policy-attach" {

aws/cloudwatchlogsforwarder/cloudwatchlogsforwarder.tf

@@ -49,6 +49,7 @@ resource "aws_iam_policy" "lambda_sqs_policy" {
   policy = templatefile("${path.module}/templates/lambda_sqs.tmpl", {
     DEAD_LETTER_QUEUE_ARN = aws_sqs_queue.sqs_queue.arn
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "lambda_sqs_policy_attachment" {
@@ -61,6 +62,7 @@ resource "aws_iam_policy" "create_logs_policy" {
   policy = templatefile("${path.module}/templates/lambda_logs.tmpl", {
     LOG_GROUP_ARN = aws_cloudwatch_log_group.cloudwatch_log_group.arn
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "create_logs_policy_attachment" {
@@ -73,6 +75,7 @@ resource "aws_iam_policy" "invoke_lambda_policy" {
   policy = templatefile("${path.module}/templates/invoke_lambda.tmpl", {
     LAMBDA_ARN = aws_lambda_function.process_dead_letter_queue_lambda.arn
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "invoke_lambda_policy_attachment" {

aws/cloudwatchmetrics/cloudwatchmetrics.tf

@@ -27,6 +27,7 @@ resource "aws_iam_policy" "iam_policy" {
 
   name   = "SumoLogicCloudWatchMetricsSource-${random_string.aws_random.id}"
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {})
+  tags   = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "policy_attachment" {

aws/elasticloadbalancing/elb.tf

@@ -75,6 +75,7 @@ resource "aws_iam_policy" "iam_policy" {
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {
     BUCKET_NAME = local.bucket_name
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "source-role-policy-attach" {

aws/elb/elb.tf

@@ -75,6 +75,7 @@ resource "aws_iam_policy" "iam_policy" {
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {
     BUCKET_NAME = local.bucket_name
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "source-role-policy-attach" {

aws/kinesisfirehoseforlogs/kinesisfirehoseforlogs.tf

@@ -67,13 +67,15 @@ resource "aws_iam_policy" "firehose_s3_upload_policy" {
     BUCKET_NAME = local.bucket_name
     ARN         = local.arn_map[local.aws_region]
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_policy" "firehose_delivery_policy" {
   policy = templatefile("${path.module}/templates/firehose_delivery_policy.tmpl", {
     KINESIS_LOG_GROUP_ARN = aws_cloudwatch_log_group.log_group.arn
     KINESIS_FIREHOSE_ARN  = aws_kinesis_firehose_delivery_stream.logs_delivery_stream.arn
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "firehose_policy_attach" {
@@ -101,6 +103,7 @@ resource "aws_iam_policy" "logs_policy" {
     AWS_ACCOUNT = local.aws_account_id
     ROLE_NAME   = aws_iam_role.logs_role.name
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "logs_policy_attach" {

aws/kinesisfirehoseformetrics/kinesisfirehoseformetrics.tf

@@ -67,13 +67,15 @@ resource "aws_iam_policy" "firehose_s3_upload_policy" {
     BUCKET_NAME = local.bucket_name
     ARN         = local.arn_map[local.aws_region]
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_policy" "firehose_delivery_policy" {
   policy = templatefile("${path.module}/templates/firehose_delivery_policy.tmpl", {
     KINESIS_LOG_GROUP_ARN = aws_cloudwatch_log_group.log_group.arn
     KINESIS_FIREHOSE_ARN  = aws_kinesis_firehose_delivery_stream.metrics_delivery_stream.arn
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "firehose_policy_attach" {
@@ -99,6 +101,7 @@ resource "aws_iam_policy" "metrics_policy" {
     AWS_ACCOUNT = local.aws_account_id
     ROLE_NAME   = aws_iam_role.metrics_role.name
   })
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "metrics_policy_attach" {
@@ -178,6 +181,7 @@ resource "aws_iam_policy" "iam_policy" {
 
   name   = "SumoLogicCloudWatchMetricsSource-${random_string.aws_random.id}"
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {})
+  tags   = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "policy_attachment" {

aws/rootcause/rootcause.tf

@@ -27,6 +27,7 @@ resource "aws_iam_policy" "iam_policy" {
 
   name   = "SumoLogicCloudWatchMetricsSource-${random_string.aws_random.id}"
   policy = templatefile("${path.module}/templates/sumologic_source_policy.tmpl", {})
+  tags = var.aws_resource_tags
 }
 
 resource "aws_iam_role_policy_attachment" "source-role-policy-attach" {