andrewjhumphrey
commented
2 years ago Do we want to make a release of this?
I suspect we'll need to get folks to update their drift policies to permit the new api call being made, won't impact users individually as they tend to run under fairly liberal permissions policies. The drift builds are pretty tightly constrained: https://github.com/envato/growth-iam-configuration/blob/main/envato-customer-development-119460712138/iam/policy/service-role/IamDriftDetection.yaml (for example)
Instead of requesting each tag separately and running into rate limits, use the resourcegrouptaggingapi to request all the tags we're interested in.
Reduces the customer-production pull run from 9 min to 20 sec.