https://www.pulumi.com/registry/packages/aws/api-docs/kms/key/#look-up is there a way to lookup keys’ by tags? similar to the ec2.get_subnets() or vpcs awaitable?

Hi, I don't think, it might return multiple ones. I can recommend to use AWS SDK instead (or combine results with pulumi).

I looked into it further, I guess it is because the kms API itself doesn’t allow for pulling via only tags… you have to know the ID 😕 I guess this makes sense on why the terraform provider never had it either. One would have to pull down all KMS’s with the list-keys API and do a client-side filter which seems inefficient since it’s a pagination operation (assuming you have a lot of keys I guess).