A system comprising: a tag repository configured to store a metadata tag for a virtual machine instantiated by a cloud computing service provider for an organizational unit; and a central resource controller for provisioning the virtual machine, the central resource controller comprising: communication circuitry operable to establish a data connection with the cloud computing service provider and the tag repository; and control circuitry configured to: provide, via the communication circuitry, a user interface to a remote operator authorized by the organizational unit, the user interface for entering the metadata tag for the virtual machine by the remote operator, for detecting an input of a predefined symbol by the user interface, and for generating at the user interface upon detecting the predefined symbol a menu containing data items as options selectable by the remote operator to include in the metadata tag being entered; provide the selectable data items to the menu at the user interface in response to the predefined symbol being detected by the user interface; accept the entered metadata tag for the virtual machine from the user interface; send the metadata tag to the tag repository for storage; generate an action trigger upon determining that a condition for a pre-configured action is met for the virtual machine responsive to content in the entered metadata tag, wherein the pre-configured action comprises a provisioning action for the virtual machine; and automatically perform the pre-configured action for the virtual machine responsive to the action trigger. a tag repository configured to store a metadata tag for a virtual machine instantiated by a cloud computing service provider for an organizational unit; and a central resource controller for provisioning the virtual machine, the central resource controller comprising: communication circuitry operable to establish a data connection with the cloud computing service provider and the tag repository; and control circuitry configured to: provide, via the communication circuitry, a user interface to a remote operator authorized by the organizational unit, the user interface for entering the metadata tag for the virtual machine by the remote operator, for detecting an input of a predefined symbol by the user interface, and for generating at the user interface upon detecting the predefined symbol a menu containing data items as options selectable by the remote operator to include in the metadata tag being entered; provide the selectable data items to the menu at the user interface in response to the predefined symbol being detected by the user interface; accept the entered metadata tag for the virtual machine from the user interface; send the metadata tag to the tag repository for storage; generate an action trigger upon determining that a condition for a pre-configured action is met for the virtual machine responsive to content in the entered metadata tag, wherein the pre-configured action comprises a provisioning action for the virtual machine; and automatically perform the pre-configured action for the virtual machine responsive to the action trigger. communication circuitry operable to establish a data connection with the cloud computing service provider and the tag repository; and control circuitry configured to: provide, via the communication circuitry, a user interface to a remote operator authorized by the organizational unit, the user interface for entering the metadata tag for the virtual machine by the remote operator, for detecting an input of a predefined symbol by the user interface, and for generating at the user interface upon detecting the predefined symbol a menu containing data items as options selectable by the remote operator to include in the metadata tag being entered; provide the selectable data items to the menu at the user interface in response to the predefined symbol being detected by the user interface; accept the entered metadata tag for the virtual machine from the user interface; send the metadata tag to the tag repository for storage; generate an action trigger upon determining that a condition for a pre-configured action is met for the virtual machine responsive to content in the entered metadata tag, wherein the pre-configured action comprises a provisioning action for the virtual machine; and automatically perform the pre-configured action for the virtual machine responsive to the action trigger. provide, via the communication circuitry, a user interface to a remote operator authorized by the organizational unit, the user interface for entering the metadata tag for the virtual machine by the remote operator, for detecting an input of a predefined symbol by the user interface, and for generating at the user interface upon detecting the predefined symbol a menu containing data items as options selectable by the remote operator to include in the metadata tag being entered; provide the selectable data items to the menu at the user interface in response to the predefined symbol being detected by the user interface; accept the entered metadata tag for the virtual machine from the user interface; send the metadata tag to the tag repository for storage; generate an action trigger upon determining that a condition for a pre-configured action is met for the virtual machine responsive to content in the entered metadata tag, wherein the pre-configured action comprises a provisioning action for the virtual machine; and automatically perform the pre-configured action for the virtual machine responsive to the action trigger.