Deploy CDK Resources with Tagging SCP inplace

[joe-rua]

Hello,

I wanted to reach out on recommendation regarding having a Tagging Service Control Policies in place and the deployment of resources using the CDK. From what I have found trying to deploy a Lambda Function, the Lambda Function attempts to be deployed first and then the tags will get applied; however, this doesn't work as we have an SCP put into place that blocks deployments on Lambda Functions without specific tags.

I wanted to see if anyone experienced this issue before and what workaround they found besides removing the SCP to deploy and then readding it. This is blocking development and I have not been able to find anything on google that fits this scenario either, so I am at a loss on what we can do to get the deployment to work.

Thanks