Tags are harmless to infrastructure resources and should hence not contribute to OPA_BLAST_RADIUS. As a side effect, this will also solve the problem that OPA_BLAST_RADIUS is exceeded when resources are tagged from outside Terraform. Note that the root casue to this problem, i.e. to honor the rule to no touch Terraform resources from elsewhere, must also be solved but making this change makes sense in any case.
Tags are harmless to infrastructure resources and should hence not contribute to OPA_BLAST_RADIUS. As a side effect, this will also solve the problem that OPA_BLAST_RADIUS is exceeded when resources are tagged from outside Terraform. Note that the root casue to this problem, i.e. to honor the rule to no touch Terraform resources from elsewhere, must also be solved but making this change makes sense in any case.