Skip to content

Conversation

@pulumi
Copy link

@pulumi pulumi bot commented Sep 16, 2025

Summary

This PR adds the missing Owner tag to all AWS resources in the deployment-lambda-eventbridge-dyndb stack to ensure proper resource ownership tracking and compliance.

Changes Made

Updated config.ts

  • Added "Owner": "platform-team" to the baseTags configuration
  • This ensures all resources that use baseTags will now include the Owner tag

Resources That Will Be Tagged

The following AWS resources will now have the Owner: platform-team tag added:

Backend Component:

  • DynamoDB Table (deployment-lambda-eventbridge-dyndb-prod-be-events-table)
  • Lambda Function (deployment-lambda-eventbridge-dyndb-prod-be-lambda)
  • IAM Role (deployment-lambda-eventbridge-dyndb-prod-be-lambdarole)

Frontend Component:

  • Lambda Function (deployment-lambda-eventbridge-dyndb-prod-fe-lambda)
  • IAM Role (deployment-lambda-eventbridge-dyndb-prod-fe-lambdarole)
  • API Gateway Stage (deployment-lambda-eventbridge-dyndb-prod-fe-apiStage)

Bus Component:

  • EventBridge Bus (deployment-lambda-eventbridge-dyndb-prod-bus-eventBus)
  • EventBridge Rule (deployment-lambda-eventbridge-dyndb-prod-bus-eventRule)

Resources Not Tagged

Some resources don't support tags in AWS API Gateway v2:

  • Lambda Permissions (not taggable)
  • API Gateway Integrations (not taggable)
  • API Gateway Routes (not taggable)
  • IAM Role Policy Attachments (not taggable)
  • EventBridge Targets (not taggable)

The existing API Gateway API (existingApiGateway) is retrieved via Api.get() from another stack and cannot be modified from this stack.

Impact

  • Compliance: All taggable resources now have proper Owner identification
  • Cost Management: Easier to track costs by owner
  • Resource Management: Clear ownership for operational responsibilities
  • No Breaking Changes: This is purely additive - existing functionality remains unchanged

Testing

The changes have been validated to ensure:

  • All existing tags (team: platform, env: prod) are preserved
  • New Owner: platform-team tag is added to all appropriate resources
  • No resources are replaced or disrupted

Next Steps

After this PR is merged, all new deployments will include the Owner tag. The next deployment will show the tag additions in the Pulumi preview.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant