Add permissions to tagging schema

src/main/java/software/amazon/cloudformation/resource/ResourceTagging.java

@@ -14,6 +14,9 @@
 */
 package software.amazon.cloudformation.resource;
 
+import java.util.HashSet;
+import java.util.Set;
+
 import lombok.AllArgsConstructor;
 import lombok.Data;
 
@@ -30,20 +33,23 @@ public class ResourceTagging {
     public static final String TAG_UPDATABLE = "tagUpdatable";
     public static final String CLOUDFORMATION_SYSTEM_TAGS = "cloudFormationSystemTags";
     public static final String TAG_PROPERTY = "tagProperty";
+    public static final String TAG_PERMISSIONS = "permissions";
     public static final ResourceTagging DEFAULT = new ResourceTagging(true);
 
     private boolean taggable;
     private boolean tagOnCreate;
     private boolean tagUpdatable;
     private boolean cloudFormationSystemTags;
     private JSONPointer tagProperty;
+    private Set<String> tagPermissions;
 
     public ResourceTagging(final boolean taggableValue) {
         this.taggable = taggableValue;
         this.tagOnCreate = taggableValue;
         this.tagUpdatable = taggableValue;
         this.cloudFormationSystemTags = taggableValue;
         this.tagProperty = new JSONPointer("/properties/Tags");
+        this.tagPermissions = new HashSet<>();
     }
 
     public void resetTaggable(final boolean taggableValue) {

src/main/java/software/amazon/cloudformation/resource/ResourceTypeSchema.java

@@ -166,6 +166,10 @@ public ResourceTypeSchema(Schema schema) {
                     taggingValue.setCloudFormationSystemTags(Boolean.parseBoolean(value.toString()));
                 } else if (key.equals(ResourceTagging.TAG_PROPERTY)) {
                     taggingValue.setTagProperty(new JSONPointer(value.toString()));
+                } else if (key.equals(ResourceTagging.TAG_PERMISSIONS)) {
+                    HashSet<String> tagPermissions = new HashSet<>();
+                    ((List<?>) value).forEach(p -> tagPermissions.add(p.toString()));
+                    taggingValue.setTagPermissions(tagPermissions);
                 } else {
                     throw new ValidationException("Unexpected tagging metadata attribute", "tagging", "#/tagging/" + key);
                 }

src/main/resources/schema/provider.definition.schema.v1.json

@@ -145,6 +145,13 @@
                     "description": "A reference to the Tags property in the schema.",
                     "$ref": "http://json-schema.org/draft-07/schema#/properties/$ref",
                     "default": "/properties/Tags"
+                },
+                "permissions": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    },
+                    "additionalItems": false
                 }
             },
             "required": [

src/test/java/software/amazon/cloudformation/resource/ResourceTaggingTest.java

@@ -16,6 +16,8 @@
 
 import static org.assertj.core.api.Assertions.assertThat;
 
+import java.util.HashSet;
+
 import org.everit.json.schema.JSONPointer;
 import org.junit.jupiter.api.Test;
 
@@ -24,13 +26,14 @@ public class ResourceTaggingTest {
     public void testResetTaggable() {
 
         final ResourceTagging resourceTagging = new ResourceTagging(true, true, true,
-                                                                    true, new JSONPointer("/properties/tags"));
+                                                                    true, new JSONPointer("/properties/tags"), new HashSet<>());
         resourceTagging.resetTaggable(false);
 
         assertThat(resourceTagging.isTaggable()).isEqualTo(false);
         assertThat(resourceTagging.isTagOnCreate()).isEqualTo(false);
         assertThat(resourceTagging.isTagUpdatable()).isEqualTo(false);
         assertThat(resourceTagging.isCloudFormationSystemTags()).isEqualTo(false);
         assertThat(resourceTagging.getTagProperty().toString()).isEqualTo("/properties/tags");
+        assertThat(resourceTagging.getTagPermissions().isEmpty());
     }
 }

src/test/java/software/amazon/cloudformation/resource/ResourceTypeSchemaTest.java

@@ -427,6 +427,7 @@ public void schemaWithTagging_withValidConfiguration() {
         assertThat(schema.getTagging().isCloudFormationSystemTags()).isEqualTo(false);
         assertThat(schema.definesProperty("propertyB")).isTrue();
         assertThat(schema.getTagging().getTagProperty()).asString().isEqualTo("/properties/propertyB");
+        assertThat(schema.getTagging().getTagPermissions()).contains("test:permission");
     }
 
     /**

src/test/resources/valid-with-tagging-schema.json

@@ -22,7 +22,10 @@
         "tagOnCreate": true,
         "tagUpdatable": false,
         "cloudFormationSystemTags": false,
-        "tagProperty": "/properties/propertyB"
+        "tagProperty": "/properties/propertyB",
+        "permissions": [
+            "test:permission"
+        ]
     },
     "additionalProperties": false
 }