support esc environment tags

[dschaller]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

The Pulumi service provider should be able to perform CRUD operations for environment tags.

Affected area/feature

ESC

[firemanxbr]

Let me share a little bit about my use case. Our environment has some requirements, such as cloud agnostic, which requires more stacks and credentials than the average use case, in addition to a series of audits and controls, which requires the default access policy not to allow access. It was great when we integrated Pulumi Cloud with our directory because user management is based on groups that we linked to the Pulumi Teams resource. We can currently authorize a group of users to have access to stacks based on tags, projects, providers, etc. This flexibility also allows us to define tags for stacks and environments, but Pulumi ESC does not yet have this feature.