AWS Organizations tag insurance policies at the moment are to be had within the AWS GovCloud (US) Areas. The tag insurance policies function is to be had to consumers during the AWS Console, AWS Command Line Interface (CLI), or AWS SDKs.
Tag insurance policies is a function that permits you to outline regulations on how tags can be utilized on AWS assets on your accounts in AWS Organizations. You’ll be able to use tag insurance policies to standardize tags on your AWS assets.
The use of tag insurance policies, you’ll ascertain your builders follow constant tags, audit tagged assets, and deal with correct useful resource categorization. You’ll be able to additionally outline and implement tag key capitalization necessities and their allowed tag values. As an example, you’ll outline the tags CostCenter and SecurityGroup the place CostCenter will have to be ‘123’ and SecurityGroup can also be ‘red-team’ or ‘blue-team’. Standardized tags help you with a bit of luck leverage tags for crucial use instances similar to price allocation and attribute-based get admission to regulate as a result of you’ll be certain your assets are tagged with the correct attributes.
Tag insurance policies is built-in with AWS Organizations, a provider for central governance and control throughout AWS accounts. You’ll be able to follow a tag coverage to all your group, particular organizational gadgets, and to person accounts. After making use of a coverage, you’ll export a cross-account, cross-region document that is helping you determine tags that don’t align together with your coverage. You’ll be able to then mixture, view, and percentage this knowledge with useful resource homeowners to proper such noncompliant tags. Additionally, you’ll optionally specify enforcement to stop noncompliant tag adjustments similar to updating a tag with a price now not allowed by way of your coverage.