fix(cloudformation): only parse valid tag key-pairs in CloudFormation

[gruebel]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

• in CloudFormation it is allowed to use intrinsic functions like If, therefore only valid tag key-pairs are parsed and others are just skipped

Fixes #3829

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules