Merge pull request #406 from NHSDigital/feature/eja-eli-413-add-extra-tags

eli-413 adding compulsory tags as per NHS England guidance

Author: eddalmond1

infrastructure/stacks/_shared/locals.tf

@@ -8,13 +8,32 @@ locals {
 
   # tflint-ignore: terraform_unused_declarations
   tags = {
-    TagVersion      = "1"
-    Programme       = "Vaccinations"
-    Project         = "EligibilitySignpostingAPI"
-    Environment     = var.environment
-    ServiceCategory = var.environment == "prod" ? "Bronze" : "N/A"
-    Tool            = "Terraform"
-    workspace       = lower(terraform.workspace)
+    # Billing and Identification (FinOps)
+    FinOpsTagVersion = "1"
+    Programme        = "Vaccinations"
+    Product          = "EligibilitySignpostingAPI"
+    Owner            = "[email protected]" # REQUIRED - distribution list recommended
+    CostCentre       = "129117"              # REQUIRED - your cost centre code
+    Customer         = "NHS England"         # Optional but recommended
+
+    # Environment Information (SecOps)
+    data_classification = "5"             # REQUIRED - 1-5 based on Cloud Risk Model
+    DataType            = "PII"           # REQUIRED - adjust based on your data
+    Environment         = var.environment # REQUIRED - Development/Testing/Preproduction/Production
+    ProjectType         = "Production"    # REQUIRED - PoC/Pilot/Production
+    PublicFacing        = "Y"             # REQUIRED - Y/N for internet-facing
+
+    # Technical Operations (TechOps)
+    ServiceCategory = "Silver"   # REQUIRED - Bronze/Silver/Gold/Platinum
+    OnOffPattern    = "AlwaysOn" # REQUIRED - AlwaysOn/OfficeHours/MF86/MF95/MF77
+
+    # Application Information (DevOps)
+    ApplicationRole = "API"       # REQUIRED - Web/App/DB/WebServer/Firewall/LoadBalancer
+    Tool            = "Terraform" # Optional - None/Terraform/Packer/CloudFormation/ARM
+
+    # Custom/Internal
+    workspace = lower(terraform.workspace)
+    Stack     = local.stack_name
   }
 
   terraform_state_bucket_name = "eligibility-signposting-api-${var.environment}-tfstate"

infrastructure/stacks/api-layer/provider.tf

@@ -1,9 +1,17 @@
 provider "aws" {
   region = "eu-west-2"
+
+  default_tags {
+    tags = local.tags
+  }
 }
 
 # Used by ACM
 provider "aws" {
   alias  = "eu-west-2"
   region = "eu-west-2"
+
+  default_tags {
+    tags = local.tags
+  }
 }

infrastructure/stacks/iams-developer-roles/provider.tf

@@ -1,3 +1,7 @@
 provider "aws" {
   region = "eu-west-2"
+
+  default_tags {
+    tags = local.tags
+  }
 }

infrastructure/stacks/networking/provider.tf

@@ -1,3 +1,7 @@
 provider "aws" {
   region = "eu-west-2"
+
+  default_tags {
+    tags = local.tags
+  }
 }