@mgoetz I just tested with Terraform and it works if you separate each tag into an its own element:

 

 

 

 

Thank you very much for the answer. This looks very good. I will let the customer test and get back to you .... 😀

@sshiflett adding tag arguments as needed to the private application resource is an inefficient way of assigning tags to resources. 
The tag_name attribute of the tag argument ideally should be updated to support the list(strings) type constraint. Then multiple tag values can be specified as a list of strings in the tfvars for the specific private application resource.

The 30-character limit imposed on the tag name attribute is also too restrictive IMO.