[ssi] Add Terraform resource labels to SSI packages (batch 1)

[mrodm]

Proposed commit message

[ssi] Add Terraform resource labels to SSI packages (batch 1)

Add four standard resource labels to the AWS provider `default_tags`
block in all Terraform `main.tf` files for the following packages:

- jamf_protect (5 data streams)
- netskope (1 data stream)
- sentinel_one_cloud_funnel (1 data stream)
- servicenow (1 data stream)
- sublime_security (3 data streams)
- symantec_endpoint_security (1 data stream)
- tanium (6 data streams)
- trellix_edr_cloud (1 data stream)

Labels added to each file:

  division = "engineering"
  org      = "obs"
  team     = "security-service-integrations"
  project  = "integrations-<package_name>-package"

The `team` value is derived from the `owner.github` field in each
package's `manifest.yml`, and `project` follows the pattern
`integrations-<package_name>-package` using the `name` field.

Author's Checklist

• All 19 main.tf files updated with the correct team and project values derived from their respective manifest.yml

---

This PR was generated with the assistance of Claude (claude-sonnet-4-6).

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[infra-vault-gh-plugin-prod]

💚 Build Succeeded

• Buildkite Build
• Commit: c0a4b94

cc @mrodm

[Copilot]

Pull request overview

This PR standardizes AWS resource tagging for a first batch of SSI integration packages by adding four organization-level labels to the provider "aws" { default_tags { tags = { ... }}} blocks in Terraform deployment fixtures under _dev/deploy/tf/main.tf.

Changes:

• Added division, org, team, and project tags to AWS default_tags across 19 Terraform main.tf files.
• Set consistent label values (division = engineering, org = obs, team = security-service-integrations) and a per-package project value following integrations-<package_name>-package.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
packages/trellix_edr_cloud/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Trellix EDR Cloud deploy fixture.
packages/tanium/data_stream/threat_response/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Threat Response deploy fixture.
packages/tanium/data_stream/reporting/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Reporting deploy fixture.
packages/tanium/data_stream/endpoint_config/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Endpoint Config deploy fixture.
packages/tanium/data_stream/discover/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Discover deploy fixture.
packages/tanium/data_stream/client_status/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Client Status deploy fixture.
packages/tanium/data_stream/action_history/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Tanium Action History deploy fixture.
packages/symantec_endpoint_security/data_stream/event/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Symantec Endpoint Security deploy fixture.
packages/sublime_security/data_stream/message_event/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Sublime Security Message Event deploy fixture.
packages/sublime_security/data_stream/email_message/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Sublime Security Email Message deploy fixture.
packages/sublime_security/data_stream/audit/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Sublime Security Audit deploy fixture.
packages/servicenow/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for ServiceNow deploy fixture.
packages/sentinel_one_cloud_funnel/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for SentinelOne Cloud Funnel deploy fixture.
packages/netskope/data_stream/transaction/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Netskope Transaction deploy fixture.
packages/jamf_protect/data_stream/web_traffic_events/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Jamf Protect Web Traffic Events deploy fixture.
packages/jamf_protect/data_stream/web_threat_events/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Jamf Protect Web Threat Events deploy fixture.
packages/jamf_protect/data_stream/telemetry/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Jamf Protect Telemetry deploy fixture.
packages/jamf_protect/data_stream/telemetry_legacy/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Jamf Protect Telemetry Legacy deploy fixture.
packages/jamf_protect/data_stream/alerts/_dev/deploy/tf/main.tf	Add standard AWS default_tags labels for Jamf Protect Alerts deploy fixture.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request