Tag ec2 instances and resources based on policy