Add role_tags variable: Tag based resource access

[kayman-mk]

We usually use tag based resource access (especially if the resources are in a different accounts). For this you have to add a tag to the iam_role.

resource "aws_iam_role" "xyz" {
  name               = "name"
  description        = "description"
  assume_role_policy = data.aws_iam_policy_document.assume_role.json

  tags = merge(local.tags, tomap({ "allowReadPlatformCredentials" : "gitlab-ci-runner" }))
}

Add the moment it is not possible to add a tag to the iam_role only. I know that I can set the tags but this adds the tag to nearly all resources which is not needed.

I propose to add a role_tags variable. Those tags are attached to the iam_role only. What do you think?