Configuring tags for per AWS resources

[Yoshi Kadokawa]

At the moment Juju does support configuring tags with AWS provider[0]
When specifying this configuration, the user can add their own tags per model.
For example,

juju add-model sample-model
juju model-config resource-tags="company_mandatory_tag=MANDATORY_TAG SERVICE=SAMPLE"

However, it would be nice if the tags could be created per resources, such as EBS, security group, and EC2 instances.
A customer has a security policy with IAM policy that restricts creating instances and AWS resources only with the specific tags. In addition to this, granularity to specify per applicaiton would be nice to have as well.
For example:

- MySQL application
EC2 instance: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=instance SERVICE=mysql
Security Group: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=security_group SERVICE=mysql
EBS: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=EBS SERVICE=mysql

- Web Server
EC2 instance: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=instance SERVICE=webserver
Security Group: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=security_group SERVICE=webserver
EBS: company_mandatory_tag=MANDATORY_TAG MANDATORY_TAG_TYPE=EBS SERVICE=webserver

[0] https://juju.is/docs/olm/define-instance-tags#heading--how-to-define-your-own-tags