https://cloudfoundation.org/assets/cloud-resource-tagging.html.c4d59d44.js

1import{_ as d,e as s,o as u,c as g,k as o,l as e,w as n,F as h,h as t}from"./app.80a6da87.js";const _={},m=t("A tag is a label assigned to a cloud resource to apply custom metadata. Almost anything in a cloud "),p=t("Resource Hierarchy"),f=t(" is taggable - from the cloud tenant on the top level down to single resources like virtual machines and databases."),y=o("strong",null,"\u{1F4A1}",-1),b=t(),k=o("strong",null,"Tag early, tag often",-1),v=t(" - at the highest possible layer in the resource hierarchy. Review the building block "),C=t("Cloud Tenant Tagging"),w=t(" for an introduction to the concept of tagging and general considerations specific to leveraging tagging to build a solid cloud foundation."),T=o("p",null,"This building block will focus on the specifics of tagging cloud resources.",-1),x=o("p",null,"Cloud Foundation teams can tag resources with information relevant to security and compliance processes.",-1),A=t("Make your Cloud Security a Priority"),R=t("One central advantage of using the cloud is rapid scalability. "),F=o("b",null,"Tag early - tag often ",-1),B=t(" to keep track of what is going on in your cloud infrastructure while it is constantly growing and changing."),I=t("Learn more"),P=o("h2",{id:"best-practices-for-cloud-resource-tagging",tabindex:"-1"},[o("a",{class:"header-anchor",href:"#best-practices-for-cloud-resource-tagging","aria-hidden":"true"},"#"),t(" Best Practices for Cloud Resource Tagging")],-1),S=t("In addition to the concerns and best practices about cloud tagging already laid out in "),L=t("Cloud Tenant Tagging"),M=t(", the following best practices apply specifically to cloud resource tagging."),q=o("h3",{id:"hold-customers-accountable-for-resource-tagging",tabindex:"-1"},[o("a",{class:"header-anchor",href:"#hold-customers-accountable-for-resource-tagging","aria-hidden":"true"},"#"),t(" Hold Customers Accountable for Resource Tagging")],-1),H=o("p",null,"It\u2019s difficult for the cloud foundation team to anticipate what kind of cloud resources internal customers want to deploy and how they will deploy them. The responsibility for tagging them correctly must consequently reside with application teams. Cloud Foundation teams should thus set clear expectations, for example by defining and communicating a tag catalog or cloud tagging policy.",-1),V=t("Automated enforcement of these policies is partially possible. For example, if your cloud foundation team wants to ensure that all cloud resources storing personally identifiable information (PII) are tagged accordingly, you can enforce a policy on common data storage resources such as Azure Storage Account or S3 Buckets to only allow creation of those resources when they contain a "),z=o("code",null,"data-classification:pii",-1),N=t(" or "),j=o("code",null,"data-classification:other",-1),E=t(" tag. Cloud Foundation teams can also audit the correct use of tags using "),O=t("Resource Configuration Scanning"),Z=t(" tools."),D=o("h3",{id:"avoid-chargeback-via-resource-tagging",tabindex:"-1"},[o("a",{class:"header-anchor",href:"#avoid-chargeback-via-resource-tagging","aria-hidden":"true"},"#"),t(" Avoid Chargeback via Resource Tagging")],-1),G=o("p",null,"In contrast to a lot of published advice around the use of cloud resource tagging, the cloud foundation maturity model recommends avoiding resource tagging for chargeback.",-1),J=o("strong",null,"\u26A0\uFE0F",-1),K=t(),Q=o("strong",null,"Cloud chargeback based on resource tagging is an anti-pattern",-1),U=t(" that\u2019s often used to cover up a lack of proper tenant isolation and unclear responsibilities. Cloud Foundation teams should ensure "),W=t("Tenant Provisioning"),X=t(" is not a bottleneck for application teams and implement "),Y=t("Chargeback via consumption cost allocation"),$=t(" on the cloud tenant level."),tt=o("p",null,"As with every rule, there are also valid exceptions for leveraging cloud resource tagging to process chargeback.",-1),ot=t("Service Providers can use resource tagging to implement "),et=t("Consumption based pay-per-use for internal Services"),nt=t(", e.g. tagging cloud resources used by a service-consumer and charging back the incurred cost"),at=o("li",null,[o("p",null,"Cloud Tenants used to host lift&shift workloads as part of Landing Zones for traditionally \u201Cnon-cloud\u201D workloads often avoid effort to re-architect application deployments by co-locating resources consumed by different internal 

1customers in the same cloud tenant (e.g. VMs on the same virtual network used by different IT Systems)")],-1),st=o("p",null,"Leveraging resource tagging for chargeback requires solid automation to detect untagged or incorrectly tagged resources.",-1),it=o("h3",{id:"align-cloud-resource-tagging-across-multiple-clouds",tabindex:"-1"},[o("a",{class:"header-anchor",href:"#align-cloud-resource-tagging-across-multiple-clouds","aria-hidden":"true"},"#"),t(" Align Cloud Resource Tagging across Multiple Clouds")],-1),ct=t("Cloud resource tagging is a platform-zone-scoped building block in the cloud foundation maturity model. Cloud Foundation teams following a multi-cloud strategy should look into "),lt=t("Multi-Cloud Tagging Policy"),rt=t(" to implement consistent tagging across all cloud platforms. This becomes especially critical when the cloud foundation team wants to centralize security and compliance capabilities like "),dt=t("Incident Management Process"),ut=t(".");function gt(ht,_t){const a=s("RouterLink"),i=s("CtaHeader"),c=s("CtaText"),l=s("CtaButton"),r=s("CallToAction");return u(),g(h,null,[o("p",null,[m,e(a,{to:"/maturity-model/tenant-management/resource-hierarchy.html"},{default:n(()=>[p]),_:1}),f]),o("blockquote",null,[o("p",null,[y,b,k,v,e(a,{to:"/maturity-model/security-and-compliance/cloud-tenant-tagging.html"},{default:n(()=>[C]),_:1}),w])]),T,x,e(r,null,{default:n(()=>[e(i,null,{default:n(()=>[A]),_:1}),e(c,null,{default:n(()=>[R,F,B]),_:1}),e(l,{class:"btn-primary",url:"https://www.meshcloud.io/2020/10/27/your-path-to-a-winning-multi-cloud-tagging-strategy/"},{default:n(()=>[I]),_:1})]),_:1}),P,o("p",null,[S,e(a,{to:"/maturity-model/security-and-compliance/cloud-tenant-tagging.html"},{default:n(()=>[L]),_:1}),M]),q,H,o("p",null,[V,z,N,j,E,e(a,{to:"/maturity-model/security-and-compliance/resource-configuration-scanning.html"},{default:n(()=>[O]),_:1}),Z]),D,G,o("blockquote",null,[o("p",null,[J,K,Q,U,e(a,{to:"/maturity-model/tenant-management/tenant-provisioning.html"},{default:n(()=>[W]),_:1}),X,e(a,{to:"/maturity-model/cost-management/chargeback-via-consumption-cost-allocation.html"},{default:n(()=>[Y]),_:1}),$])]),tt,o("ul",null,[o("li",null,[o("p",null,[ot,e(a,{to:"/maturity-model/cost-management/consumption-based-pay-per-use-for-internal-services.html"},{default:n(()=>[et]),_:1}),nt])]),at]),st,it,o("p",null,[ct,e(a,{to:"/maturity-model/security-and-compliance/multi-cloud-tagging-policy.html"},{default:n(()=>[lt]),_:1}),rt,e(a,{to:"/maturity-model/security-and-compliance/incident-management-process.html"},{default:n(()=>[dt]),_:1}),ut])],64)}var pt=d(_,[["render",gt]]);export{pt as default};