this looks wrong - we only have a limited amount of tags per resource (10), and the keys should be known up front.

What's going on here?