Tagging governance using AWS Organizations in the public sector

This article discusses how the Department of the Air Force's Kessel Run unit implemented a robust tagging governance solution using AWS Organizations to manage cloud resources effectively.

• Developed a preventative control system using Service Control Policies (SCPs) to enforce resource tagging
• Solved challenges of managing Amazon EC2 instances across multiple AWS accounts
• Used De Morgan's laws to implement complex logical conditions in SCPs
• Created a framework that ensures consistent tagging at resource creation time
• Implemented tag requirements including deployment type, backup compliance, and business unit

The solution eliminates reactive cleanup scripts, reduces operational overhead, and provides a scalable approach to resource governance across different deployment environments.