Disabling all tags in all iam resources

[jamengual]

what

• In Making tags for roles optional #43 I added the option to disable role tags but in environments where roles are created under very strict controls, the policy tags for the roles sometimes can't be tagged. This change disable tags for all IAM related resources.

why

• to disable tags for role-related things. Use one variable instead of two.

references

• Making tags for roles optional #43

[jamengual]

/test all

[nitrocode]

I know this is an old change. I was reviewing this from git blame because i was surprised we need a tags_enabled var when the tags var can be set to null or an empty map {}. The original change is in the referenced PR and the inclusion of managed policies is in this PR.

If the tags var can be used to disable tagging, can we consider deprecating tags_enabled var?

cc @jamengual @Gowiem

[Gowiem]

+1 from me, but I've never needed this functionality. @jamengual can make his case for or against 👍

[jamengual]

no needs for tags_enabled; this could have been done as @nitrocode suggested.