feat: Allow override of the default tags override

examples/object/main.tf

@@ -101,3 +101,19 @@ module "s3_bucket_with_object_lock" {
     object_lock_enabled = "Enabled"
   }
 }
+
+module "object_with_default_tags_override" {
+  source = "../../modules/object"
+
+  bucket                = module.s3_bucket.s3_bucket_id
+  key                   = "${random_pet.this.id}-local"
+  override_default_tags = true
+
+  file_source = "README.md"
+  #  content = file("README.md")
+  #  content_base64 = filebase64("README.md")
+
+  tags = {
+    Sensitive = "not-really"
+  }
+}

modules/object/main.tf

@@ -36,4 +36,13 @@ resource "aws_s3_object" "this" {
   lifecycle {
     ignore_changes = [object_lock_retain_until_date]
   }
+
+  override_provider {
+    dynamic "default_tags" {
+      for_each = var.override_default_tags ? [true] : []
+      content {
+        tags = {}
+      }
+    }
+  }
 }

modules/object/variables.tf

@@ -147,3 +147,9 @@ variable "source_hash" {
   type        = string
   default     = null
 }
+
+variable "override_default_tags" {
+  description = "Ignore provider default_tags. S3 objects support a maximum of 10 tags."
+  type        = bool
+  default     = false
+}

modules/object/versions.tf

@@ -4,7 +4,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 3.75"
+      version = ">= 5.24"
     }
   }
 }