Generates a policies file to use with custodian that will find any resources with bad tags

CreateAllBadTagPolicies.ps1

$AWSServicesArray = @("account","acm-certificate","alarm","ami","app-elb","app-elb-target-group","asg","backup-plan","batch-compute","batch-definition","cache-cluster","cache-snapshot","cache-subnet-group","cfn","cloud-directory","cloudhsm-cluster","cloudsearch","cloudtrail","codebuild","codecommit","codepipeline","config-rule","customer-gateway","datapipeline","dax","directconnect","directory","distribution","dlm-policy","dms-endpoint","dms-instance","dynamodb-backup","dynamodb-stream","dynamodb-table","ebs","ebs-snapshot","ec2","ec2-reserved","ecr","ecs","ecs-container-instance","ecs-service","ecs-task","ecs-task-definition","efs","efs-mount-target","eks","elasticbeanstalk","elasticbeanstalk-environment","elasticsearch","elb","emr","eni","event-rule","event-rule-target","firehose","fsx","fsx-backup","gamelift-build","gamelift-fleet","glacier","glue-connection","glue-dev-endpoint","health-event","healthcheck","hostedzone","hsm","hsm-client","hsm-hapg","iam-certificate","iam-group","iam-policy","iam-profile","iam-role","iam-user","identity-pool","internet-gateway","iot","kafka","key-pair","kinesis","kinesis-analytics","kms","kms-key","lambda","lambda-layer","launch-config","launch-template-version","lightsail-db","lightsail-elb","lightsail-instance","log-group","message-broker","ml-model","nat-gateway","network-acl","network-addr","opswork-cm","opswork-stack","peering-connection","r53domain","rds","rds-cluster","rds-cluster-param-group","rds-cluster-snapshot","rds-param-group","rds-snapshot","rds-subnet-group","rds-subscription","redshift","redshift-snapshot","redshift-subnet-group","rest-account","rest-api","rest-resource","rest-stage","rest-vpclink","route-table","rrset","s3","sagemaker-endpoint","sagemaker-endpoint-config","sagemaker-job","sagemaker-model","sagemaker-notebook","sagemaker-transform-job","secrets-manager","security-group","shield-attack","shield-protection","simpledb","snowball","snowball-cluster","sns","sqs","ssm-activation","ssm-managed-instance","ssm-parameter","step-machine","storage-gateway","streaming-distribution","subnet","support-case","transit-attachment","transit-gateway","user-pool","vpc","vpc-endpoint","vpn-connection","vpn-gateway","waf","waf-regional")

$TagName = "MyTag"
$TagValue = "MyTagsValue"

$AllPoliciesArray = @("policies:`r`n`r`n")

$template = @'
- name: aws-<SERVICE_HERE>-tag-compliance
  resource: <SERVICE_HERE>
  filters:
    - "tag:<TAGNAME_HERE>": "<TAGVALUE_HERE>"
'@

foreach($Service in $AWSServicesArray)
{
    $ServicePolicy = $template
    $ServicePolicy = $ServicePolicy -replace "<SERVICE_HERE>","$Service"
    $ServicePolicy = $ServicePolicy -replace "<TAGNAME_HERE>","$TagName"
    $ServicePolicy = $ServicePolicy -replace "<TAGVALUE_HERE>","$TagValue"

    $AllPoliciesArray += $ServicePolicy
}


$AllPolicies = $AllPoliciesArray -join "`r`n`r`n"

Write-Output $AllPolicies | Out-File C:\temp\AllResourceBadTags.yaml