[mmbleh]

Kinda, but it isn't consistent.

They've been steadily improving/fixing it, but for some resources, tagging new resources via the console is a 2 step process - it creates the resource THEN adds the tags. They are fixing these things so it's all added at once.

What this does is block the ability to create some resources via console since you can't add tags at creation

[whoknew1122]

This is also a problem when using CloudFormation. CloudFormation will often create resources without tags and then add the tags in a separate call.

[ldoughty]

That's the root of my complaint...

This effectively means IAM cannot limit creation events by tag because it's two steps. Only solution is two steps