Description of changes:
To ensure compatibility with older versions, we previously ignored the AccessDenied exception when a customer did not have permission to add stack level tags. This PR addresses this issue by aligning with the latest CloudFormation guidelines and instead throwing an UnauthorizedTaggingOperation error code.
However, we have retained the already exist tagging logic to differentiate between access denied for resource tags and access denied for stack level tags. Once CloudFormation confirms that it is safe to convert UnauthorizedTaggingOperation to the regular AccessDenied error code, we can safely remove all the logic related to tag error management and the safeCreate mechanism.
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
Description of changes: To ensure compatibility with older versions, we previously ignored the AccessDenied exception when a customer did not have permission to add stack level tags. This PR addresses this issue by aligning with the latest CloudFormation guidelines and instead throwing an UnauthorizedTaggingOperation error code.
However, we have retained the already exist tagging logic to differentiate between access denied for resource tags and access denied for stack level tags. Once CloudFormation confirms that it is safe to convert UnauthorizedTaggingOperation to the regular AccessDenied error code, we can safely remove all the logic related to tag error management and the safeCreate mechanism.
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.