LearnGlossary

What is a cloud tagging strategy?

Updated 26 October 2026 · Published by Zoorik

A cloud tagging strategy is your set of rules for the labels on cloud resources. It says which tag keys your resources must carry, which values they allow, and how you enforce them.

A tagging strategy sets keys, values and enforcement Illustration with no amounts. A box, Tagging strategy, forks into three arrows. An arrow labelled required keys points to a box reading costcenter, businessunit, env. An arrow labelled allowed values points to a box reading env: prod, one case only. An arrow labelled enforcement points to a box reading Azure Policy or AWS tag policies. Lines from the three boxes join into one arrow, labelled tagged resources, that ends at a box reading Spend with an owner. A tagging strategy sets keys, values and enforcement Tagging strategyrequired keysallowed valuesenforcementcostcenterbusinessunitenvenv: prodone case onlyAzure Policyor AWS tag policiestagged resourcesSpend with an owner
Illustration, with no amounts: the three things a tagging strategy sets, each with the page’s example, and the result, spend you can assign to an owner.

Cloud tagging, or tagging in cloud computing, is adding the labels. Each tag is a key and a value, such as Environment: Production.

An example tag set

Microsoft sorts Azure tags into five types. A small strategy might require three, here with Microsoft’s examples:

  • costcenter: 55332 (accounting): who pays.
  • businessunit: finance (ownership): who owns it.
  • env: prod (functional): which environment.

Keep the case of values consistent. On Azure, Production and production show as two lines in cost reports.

Tag policy on AWS and Azure

  • In an AWS tagging strategy, AWS Organizations tag policies set a key’s case and allowed values. With enforcement on, a tagging request that breaks them fails. Missing tags need a “required tag key” rule, checked in infrastructure as code (IaC) tools such as AWS CloudFormation.
  • In an Azure tagging strategy, Azure Policy’s built-in “Require a tag on resources” definition blocks deploying a resource without the tag. Other definitions add a missing tag, and a remediation task can tag existing resources.

Why it matters for your cloud cost

Find your own number

One line in your cloud console. One PDF report with your estimated saving at list price.

Estimate your saving

Talk to the builders

Thirty minutes with the people who build Coral and Amoeba.

Book a demo (opens in a new tab)

Or write to founders@zoorik.com