• Add new tags fields (CloudWatch and S3 outputs). 
• Validation will need to be done in the controller, as kubebuilder cannot validate a map of values.  
  • Set a condition in the case of validation failure.
  • Enforce all AWS rules for tag count (max 50), key/value length, and character sets. Static strings only, no templating requirements.

API Validation Rules

tags  field

These rules should be applied to the tags map in both the CloudWatch and S3 output specifications, as they are derived from general AWS tagging policies.   

• Maximum number of tags per resource: Max 50 tags per CloudWatch Log Group or S3 Bucket.
• Tag key length limits: Min 1 / Max 128 characters.
• Tag value length limits: Min 0 / Max 256 characters.
• Tag keys must be non-empty and cannot start with aws:: Must not start with aws: (reserved for AWS use). Must contain characters from the following sets: letters, numbers, spaces, and the characters ._:/=+@-.
• Tag values can be empty strings: Must contain characters from the following sets: letters, numbers, spaces, and the characters ._:/=+@-.

outputs:
  - name: my-cw
    type: cloudwatch
    cloudwatch:
      tags:
        'test.log_duty': logging-admin
        "testing::=tags11": cahartma-1121