AWS::IAM::Role (add tagging support)

[luiseduardocolon]

1. Title -> Customers would like to be able to tag IAM Roles from a CloudFormation template, after the recent introduction of the feature. Support for tags in IAM principals has been added to Boto 3 as well.
2. Scope of request -> Add at creation, and to update existing roles.
3. Expected behavior -> See 2.
4. Test case recommendation (optional) ->
5. Links to existing API doc (optional) ->
6. Category tag (optional) -> Compute
7. Any additional context (optional)

[pbsinclair42]

Looks like this is now supported: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#cfn-iam-role-tags

[whereisaaron]

eksctl-io/eksctl#778

[jimsmith]

@luiseduardocolon
Hello,

Having deployed CF template using the IAM Roles 'tags' https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#cfn-iam-role-tags

I have found that the !Ref is not being honored.

This below works when it's hardcoded

Tags:
        - 
          Key: "keyname1"
          Value: "value1"
        - 
          Key: "keyname2"
          Value: "value2"

This below is not working and the same Parameter works for EC2 and Lambda resources.

Tags:
        - 
          Key: "keyname1"
          Value: "value1"
        - 
          Key: "Application"
          Value: !Ref Application
        - 
          Key: "keyname3"
          Value: "value3"

[mcanlas]

I'm running into the same problem as above, where calls to !Ref aren't being resolved (the key doesn't show up at all).