[feature][backend]: Allow for Terraform State File Object Tagging in AWS

[KylePeterDavies]

Terraform Version

Terraform v1.5.7
on darwin_arm64

Your version of Terraform is out of date! The latest version
is 1.10.2. You can update by downloading from https://www.terraform.io/downloads.html

Use Cases

• Data Classification
• Attribute Based Access Control
• Notes?

Attempted Solutions

N/A

Proposal

Not sure if this should be in Terraform or Terraform-Provider-AWS . It would be nice if it was possible to tag the Terraform State File when created by Terraform from the backend block. I under you also use s3 paths but this may not be the most scalable solution for everybody.

References

N/A

[crw]

Thanks for this feature request! If you are viewing this issue and would like to indicate your interest, please use the 👍 reaction on the issue description to upvote this issue. We also welcome additional use case descriptions.

Backends are managed by the relevant provider team, in this case the HashiCorp AWS provider team. If there are any updates, that team will be providing them. That said, backend development is usually a lower priority to provider features and issues, just to set expectations correctly.

Thanks again!

[bschaatsbergen]

Hi @KylePeterDavies,

Thank you for opening this issue. I agree that being able to add tags to S3 objects is a valuable feature, e.g., aligning a tag from your commit history with a corresponding tag on the S3 object of your state file could make it easier to locate and match the right revision when needed. And, being able to reference the tag in an IAM policy for the bucket would add an extra layer of security for your state file. To keep everything tracked under #30054, I’ll be closing this one. This will help us consolidate our thoughts and feedback in one place. Please upvote the issue there and feel free to share any further thoughts!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.