Define the rules for applying the tags - AWS Prescriptive Guidance

Define the rules for applying the tags

An effective tagging strategy uses standardized tags and applies them consistently and programmatically across AWS resources. You can use both proactive and reactive approaches for governing tags in your AWS environment.

 

Proactive enforcement

Reactive enforcement

Approach

Tags are applied based on a stakeholder-approved tagging policy and dictionary.

Resources with noncompliant tags are stopped or terminated.

AWS

Open source

GorillaStack (auto-tag)

AWS Organizations centrally manages policies across multiple AWS accounts by creating logical groupings of accounts called organizational units (OUs). In this way, the organization has several policies that are attached to some of the OUs or directly to accounts.

As an example, you could have two OUs (B2B products and Internal Tooling) with linked accounts (including production and development environments). Using AWS Organizations, you could attach policies for the B2B products and Internal Tooling OUs.