You can use tags to manage access to cloud resources that enable tagging, such as IAM. Tags can be used here to manage which IAM users and roles have access to certain resources: customer-maintained policies, IAM identity providers, instance profiles, server certificates, and virtual MFA devices.