Add the options to add tags to the created resources

[threkk]

Hello! I am looking into using s3-credentials for my projects. I use tags to identify resources in different ways, like how it was created or the project it belongs. I was wondering if there is planned support for adding tags to the resources created, or if you would be open for a contribution in that area.

[simonw]

This seems like a very good idea.

[simonw]

One small catch: the s3-credentials create command may create a bunch of different resources:

• An S3 bucket (or multiple buckets)
• An IAM user
• Maybe some policies too? I don't know if those are things that can have tags, but it wouldn't surprise me

As such, I wonder if having an option that says "tag everything created by this command" would be useful enough - what if people want to use different tags for the buckets and the user, for example?

So we could have an option --tag name value which applies to every resource - but then other options for --bucket-tag name value and --user-tag name value etc which you can use instead if you want different tags to different types of resource.

Or am I completely overthinking this? Maybe most people would be fine with tags applying to every type of created resource and people who really care about it can add the tags themselves.

[threkk]

In my case, the purpose of using tags is to find all the resources related to a project. From my perspective, just being able to add the same tags to all the resources is more than enough. However, I can see a case where people would like to use different tags for different resources. I would choose the most simple approach first, and wait to see if there is a need for higher granularity.