Define the rules for applying the tags
An effective tagging strategy uses standardized tags and applies them consistently and programmatically across AWS resources. You can use both proactive and reactive approaches for governing tags in your AWS environment.
|
Proactive enforcement |
Reactive enforcement |
Approach |
Tags are applied based on a stakeholder-approved tagging policy and dictionary. |
Resources with noncompliant tags are stopped or terminated. |
AWS |
|
|
Open source |
GorillaStack (auto-tag |
|
AWS Organizations centrally manages policies across multiple AWS accounts by creating logical groupings of accounts called organizational units (OUs). In this way, the organization has several policies that are attached to some of the OUs or directly to accounts.
As an example, you could have two OUs (B2B products and Internal Tooling) with linked accounts (including production and development environments). Using AWS Organizations, you could attach policies for the B2B products and Internal Tooling OUs.