# TFFR9 - AzAPI - Tag Propagation

Module Specification for the Azure Verified Modules (AVM) program

ID: TFFR9 - Category: Inputs/Outputs - AzAPI - Tag Propagation Applicability This requirement applies independently to every root module and submodule that directly declares a managed AzAPI resource. The azapi_resource_tag rule determines whether a resource type supports the tags argument from its embedded AVM-generated capability snapshot.
Requirement For every statically supported resource type, the resource MUST set the standard AVM tags input exactly as follows:
resource "azapi_resource" "this" { type = var.resource_types.example_widgets tags = var.tags } The assignment MUST NOT merge, conditionally replace, or otherwise transform var.tags at the resource declaration. Apply any approved tag shaping before assigning the standard input.
For every statically unsupported resource type, the resource MUST NOT set a tags argument. Do not use a conditional, dynamic value, or an empty map to force tags onto an unsupported type.
The validation skips dynamic or otherwise unevaluable type expressions to avoid false positives. Authors SHOULD keep resource types statically resolvable through var.resource_types as required by TFFR6.
The tags input and propagation behavior remain governed by the standard tags interface. The embedded AVM-generated capability snapshot, rather than a hand-maintained module allowlist or an AzAPI import, is the authority for deciding whether the argument is supported.
See azapi_resource_tag for enforcement and the supported override.


---
Source: https://raw.githubusercontent.com/Azure/Azure-Verified-Modules/refs/heads/main/docs/content/specs-defs/includes/terraform/shared/functional/TFFR9.md
Last Modified: 0001-01-01