AWS Config: Tags of AWS::IAM::Policy and AWS::CloudWatch::Alarm are not recorded

[r-heimann]

See title, both resource types are missing recorded resource information.

[iainelder]

The schema suggests that the tags property exists on both of these resources. Do you have a sample query and results?

aws-config-resource-schema/config/properties/resource-types/AWS::IAM::Policy.properties.json

Lines 30 to 32 in 1814225

	"tags.key": "string",
	"tags.tag": "string",
	"tags.value": "string",

aws-config-resource-schema/config/properties/resource-types/AWS::CloudWatch::Alarm.properties.json

Lines 40 to 42 in 1814225

	"tags.key": "string",
	"tags.tag": "string",
	"tags.value": "string",

I have never tried to query the tags on these resources, so I don't know whether those properties are really implemented or not.

[r-heimann]

The schema suggests that the tags property exists on both of these resources. Do you have a sample query and results?

aws-config-resource-schema/config/properties/resource-types/AWS::IAM::Policy.properties.json

Lines 30 to 32 in 1814225

	"tags.key": "string",
	"tags.tag": "string",
	"tags.value": "string",

aws-config-resource-schema/config/properties/resource-types/AWS::CloudWatch::Alarm.properties.json

Lines 40 to 42 in 1814225

	"tags.key": "string",
	"tags.tag": "string",
	"tags.value": "string",

I have never tried to query the tags on these resources, so I don't know whether those properties are really implemented or not.

There is already an internal AWS Ticket open for this issue. Example Query:

SELECT
  *,
  relationships,
  tags
WHERE
  resourceType = 'AWS::CloudWatch::Alarm'

[iainelder]

Thanks for the info! We can look forward to a fix for that then.

[nascit]

This is also affecting my team

[runjivu]

are there any updates on this?