What is the primary purpose of resource tagging in cloud environments?

• A. Tags automatically encrypt data at rest.
• B. Tags enable cost reporting and policy enforcement.
• C. Tags define network segmentation boundaries.
• D. Tags replace identity and access management controls.

Answer: (B)

Resource tagging attaches metadata to cloud resources to help organize and govern them. The primary purpose is enabling cost reporting and policy enforcement. By tagging resources with identifiers like cost_center, department, project, or environment, you can generate accurate cost and usage reports, allocate expenses, and support chargebacks. Tags also enable governance through tag-based policies that can require certain tags, enforce tagging standards during provisioning, and trigger automated actions based on tag values. Tags do not encrypt data at rest, define network segmentation boundaries, or replace IAM controls; encryption, network segmentation, and access management are handled through separate mechanisms, with tagging often complementing governance rather than substituting them.