Why is tagging important in cloud cost management and governance, and what are best practices for tag strategies?

• A. Best practices: standardized tag keys/values, mandatory tags for cost centers, environments, owners; enforce via policy; automate tag application and auditing.
• B. Tags reduce security risk by exposing sensitive data.
• C. Tags are primarily cosmetic and have no governance impact.
• D. Tags replace access control lists.

Answer: (B)

Tagging in cloud environments is a governance mechanism that provides the data needed to allocate costs, assign ownership, and enforce policies across resources. When tag keys and values are standardized, you can attribute spend to cost centers, track environments (development, testing, production), and identify the resource owner. This enables accurate budgeting, chargeback/showback, and clearer accountability. Enforcing mandatory tags through policy ensures new resources come in compliant, while automating tag application and auditing helps maintain consistency and catch drift over time. Tags also empower automated reporting and governance workflows, making it easier to apply controls and demonstrate compliance.

Best practices for a tag strategy include defining a small, stable set of tag keys with controlled vocabularies, requiring essential tags such as cost center, environment, and owner, and enforcing these through guardrails or policy. Automate tag application during provisioning and implement regular tag audits to catch missing or incorrect tags. Ensure tag values avoid exposing sensitive data and avoid storing secrets in tags; use separate mechanisms for secret management when needed. Plan for tag inheritance and proper propagation when resources are copied or moved, and periodically review the tag set to retire unused keys.