How to Create a Future Proof Cloud Tagging Strategy

Aug 31, 2021


So, you’re investing in the cloud – you’ve established the need for closer cross-functional communication and collaboration through FinOps best practices and you’re looking at workloads and understand the mechanics of cloud tagging and why it’s so important… (if not, you may wish to refer to our Introduction to Cloud Tagging blog for reference).

In this next installment we’re looking at what you can do now to ensure you have the best possible cloud tagging strategy moving forward. How to avoid the common mistakes that can turn around and bite you in future…

Communication and Stakeholder Buy-in

The first step to successful tagging starts with communication between key stakeholders. Many people in an organization will have questions around cloud resources, security and costs, so you need to identify who these people are as they are your primary stakeholders. You should explain to them what tagging is and how it can help them. You need to communicate the need for tags and ensure that all teams are on the same page.

As described in FinOps best practices, some obvious stakeholders include:

  • Application owners
  • DB admins
  • Process owners
  • IT finance
  • Disaster recovery team
  • Security
  • Cloud FinOps
  • Cloud platform owner


Deciding the Questions to Ask 

Once you have stakeholders and buy-in, you should collect the questions that they are looking to answer around cloud resources. This could include:

  • Who is the owner of the resource?
  • What department does it belong to?
  • What is the associated cost center?
  • Does the resource contain any Personally Identifiable Information (PII)?
  • Is the environment production, development, test etc.?
  • What is the project end-date or when should this resource be reviewed?
  • Can this resource be shut down at night?
  • How often should this resource be backed up?
  • What project does this resource belong to?

Once you have the stakeholder questions then you can start to see how certain tags can be created to answer and readily report on one or many of these queries. At this point you will be able to draft your tags by creating the values and keys.

However, do not implement them at this step.

Understanding the Limitations of Platforms and Ensuring Tags Are Future-Proof


If you have or are planning to have a multi-cloud environment, it is important to be mindful of the tagging limitations of each cloud platform, such as capitalization, character lengths or the character types that are allowed. It’s important to create tags that will work for all your environments.

  AWS Azure Google (GCP)
Tags per resource 50 50 64
Length of key 127 512 63
Length of value 256 256 63
Case sensitive Yes (keys and values) No Lowercase only
Allowed characters Letters, spaces, numbers, and + – = . _ : / @ Alphanumeric Lowercase letters, numeric characters, underscores, and dashes. International characters are allowed.

Global Policy

If your organization has cloud environments across the globe, it is important to ensure that tags can work across all regions. Take note here of characters which might be used, the standardization of dates and times zones. This is important as it will allow you to analyze your global data as a whole.

Future Proof

Your cloud tagging strategy should be as future-proof as possible. If today you are only using Azure but you have a plan to use Google Cloud in the future, then you need to consider this when building your tags. Each platform has its own tagging standards and limitations, for example tags within Google Cloud must be in lowercase, so be aware of your future platforms when creating your tags or you could end up with a fragmented tagging strategy and siloed reporting.

Keep it simple and compatible. Using only lowercase alphanumeric characters for tag keys and values in all cloud platforms will mitigate most of the risks.

Tagging Policy and Documentation

Tagging Policy

Although it may be the stakeholders that create the tagging standards, the actual implementation rests upon those who are creating the resources. Therefore, a clear tagging policy is needed to define tagging rules and best practices to mandate how tags are standardized, for example:

• Capitalization standards
• Whether to use country codes
• How to write dates
• How to write times
• Owner/name format e.g. first name, last name, or email address

This information should be shared throughout the company.


Tagging Documentation

It is also best practice to fully document your tagging decisions. Stakeholders should be able to clearly articulate the need for each tag. Each tag should have a tag owner, this individual should be able to articulate why the tag is needed and the value which it brings to the business. This information should be clearly documented in case that individual should leave the business. Documentation should also outline the appropriate values that can be given to a tag. This documentation should also be reviewed on a regular basis to ensure that all tags are still useful. 

Staged Implementation 

INow that you have all the information in place, you can begin to add tags to your cloud resources. So where do you start? When looking to implement cloud tags it is important to remember that they are not retroactive and you can only report against them from the moment they have been added to a resource. We therefore recommended that if your cloud resources are already deployed then you start by implementing a small number of highly-important tags and once these tags have been applied to the whole estate go back and add more. Some tags that you may choose to start with include:
• Who is this resource for e.g. dept = marketing
• What product e.g. product = salesforce
• Who owns the resource owner = jane brown

For more guidance on cloud tagging best practices and challenges, the Certero Guide to Cloud Tagging eBook is available now (free) via the Certero website.

How Certero can Help

Certero offer an innovative range of Cloud and SaaS Management solutions and Services to help any organisation gain full visibility and control of cloud resources and to be able to efficiently maintain governance and on-going cost optimization processes.

Simply reach-out to the Certero team who will be happy to help to answer any questions and address any challenges you may have, and visit www.certero.com for more information on Certero’s uniquely effective approach to optimizing technology value and cost; from cloud, to on-premises business assets and beyond.

Follow us on Linkedin for more Cloud


Read more like this from

Ready to learn how Certero can securely support your business’ transformation?
Speak to our experts today!

Certero's [software-as-a-service] Solution

Certero help organizations transform their outdated operations and technologies in days and weeks not years. All of Certero’s solutions can be delivered as SaaS with no loss of functionality. 

Certero Unified Platform
Learn more about Certero’s truly unique ‘unified’ platform.

Digital Transformation Edition
Transform in days and weeks, not months and years, start your journey now.

Verified Oracle LMS/GLAS Solution
Verified LMS (License Management Services), now GLAS (Global Licensing & Advisory Services) solution.

Cloud Management
Manage Visibility, Cost and Governance of your Cloud Resources 

Enterprise Standard Edition - ITAM / SAM for Wintel
Default solution to manage ITAM/SAM for a Wintel environment. 

Enterprise Premium Edition - ITAM / SAM for Wintel
All you need in one place to manage your ITAM/SAM for a Wintel & Citrix environment. 

Stand-a-lone or holistic solutions for IBM, SAP and Oracle.

Software License Compliance
One Stop Shop, products and services for any solution – all in one

Business Intelligence Solution
See how to turn DATA into INFORMATION then transform into KNOWLEDGE, all in a few clicks. 

IT Asset Visibility
Find out: What do I own? Where is it located? Who is using it?

ITSM & CMDB Integration 
Populating the CMDB with ‘Quality’ asset information is more critical than ever

SaaS Subscription Management
Discover, manage and optimize your SaaS investments.

Everything in One place, True Unification
IT Hardware, Software, SaaS and Cloud Asset Management products that can run ‘stand-a-lone’ or ‘holistically’ and optimally together as a single solution, no dependencies. True unification across all asset and platforms and all delivered as SaaS. All of Certero’s products have the best TTV (Time to Value) by some distance.

Certero for Enterprise ITAM
Networks, printers, routers, Wintel, Mac, Linux, zLinux, Unix, all virtualizations and much more....

Certero for Enterprise SAM
Focused on Wintel software vendors, including automated solutions for Microsoft, Adobe and much more...

Certero App Centre 
Enterprise ‘Application Portal’ for Self-Service application provisioning.

Certero for Mobile
Go beyond standard MDM and deliver full management and security for your mobile workforce.

Certero SRDB (Software Recognition)
Transform raw software inventory data into actionable intelligence about application usage and licensing.

Certero for Oracle 
Optimize your Oracle Database, Middleware and E-Business Suite applications.

Certero for IBM
Discover and manage all IBM software & entitlements across the network. Dual Inventory, ILMT and Certero.

Certero for SAP Applications
Managing and automating the analysis of complex SAP named user and engine licenses across your estate. 

An intuitive self-service password reset solution that can reduce service desk calls by 30%. 

PC Power Management solution. Save money and reduce your carbon footprint. 

Certero for Cloud Visibility, governance, reporting and control to IaaS and PaaS environments.
Certero for SaaS See, Manage and Eliminate Over-Spending with your SaaS Subscriptions.

Certero [Do IT] Differently - Technology Led Professional Services

Certero are pioneering the new way that ITAM & SAM services can be delivered.

SAM Managed Services
Expertise and technology to realize your license management & technology governance goals.

Discovery and Inventory
Achieve full visibility of all computers, servers and other IT assets across all platforms and locations. 

ELP and Optimization
Build and deliver ELPs & optimization reports for key software publishers.

SAM Maturity Assessment
Enhance your SAM program with the insight of focused & relevant improvement recommendations. 

Training and Education
Quick & effective knowledge transfer from Certero's licensing and vendor experts. 

Gartner Peer Insights Customers’ Choice

Rated #1 for SAM Customer Satisfaction year after year, after year

For the latest in ITAM, SAM, Cloud and SaaS Asset Management

White Papers and eBooks 
Download the latest white papers and eBooks for key insights and guides.

Read the latest news from Certero and the industry.

Events and Webinars
Keep up to date with Certero's latest webinars and events.


View our range of product videos, webinars and customer case studies. 

Data Sheets
Download our datasheets which highlight the key benefits and features of our world class products and services. 

Case Studies 
See how organization around the globe change they way they [Do IT].

We think [and do] IT Differently

We don’t believe in claiming to be something we’re not. We will not do mediocre, average, indifferent, or outdated. We are different and will do it differently.

About Us
Get to know us more

Our Story
See how our approach is different

Our Journey
A timeline of events

Our Vision, Mission and Purpose
Mission, Purpose and Values

Browse our current roles

Find our nearest location