ec2: add support for tags for Gateway Endpoint

[jalencato]

Describe the feature

For s3_gateway_endpoint, we hope we can add a tag value for the it.

Use Case

We hope to get the problem done by this way to add a value to the gateway endpoint.

vpc = ec2.Vpc.from_lookup(self, "VPC", is_default=True)
s3_gateway_endpoint = vpc.add_gateway_endpoint(
                    "ExampleCdkStackS3Endpoint",
                    service=ec2.GatewayVpcEndpointAwsService.S3,
                    tags= {"Name", "test"}
                )

Proposed Solution

No response

Other Information

Any other api can also be workable.

FYI, I tried to use cdk.tags but failed, I used the code like:

Tags.of(s3_gateway_endpoint.node).add("Name", f"{stack_config.stack_prefix}-s3-gateway")

But I did not see it works here.

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.131.0

Environment details (OS name and version, etc.)

Mac Sonama 14.5

[ashishdhingra]

Findings:

• Looking at CreateVpcEndpoint, it appears to specify TagSpecification.
• AWS Console also appears to have UI for specifying tags during endpoint creation.
• CloudFormation guide for AWS::EC2::VPCEndpoint doesn't have any property named Tags (similar to AWS::EC2::VPCPeeringConnection).
• [CloudFormation resource specification](CloudFormation resource specification) also doesn't mention about Tags being supported.
• aws-ec2-vpcendpoint.json specifies the resource as not taggable.

Need to reach out to CloudFormation team.

[ashishdhingra]

Created internal ticket for CloudFormation team: P145664622

[ashishdhingra]

Response from CloudFormation support:

This is a known limitation of the AWS::EC2::VPCEndpoint resource, the CloudFormation resource Uluru handler currently does not support tagging. CDK functionality is generally limited to CloudFormation functionality, so as tagging is not supported for this resource in CFN, it is not supported in CDK.

There is an open public request to have tagging be supported for this resource here: aws-cloudformation/cloudformation-coverage-roadmap#196

@jalencato As a workaround, you may use custom resource to add tags to VPC Endpoint.

[jalencato]

I will give it a try.