Description

Ensure OVHcloud resources carry the tags required by the organization, such as environment, owner, application, and cost center, so every resource can be identified, managed, and covered by tag-based IAM policies.

Rationale

Untagged resources are hard to assign to an owner, review, or include in cost reports, and they are often forgotten. Tags also allow IAM policies to grant access based on tags. Consistent tagging improves accountability, security reviews, and cost control.

Impact

  • Every resource has a known owner and purpose

  • Supports tag-based IAM policies and cost reports

  • Existing resources must be tagged

Default Value

By default, resources have no custom tags.

Pre-Requisites

  • Permission to manage the resources

  • A defined list of required tags

Test Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Identity, Security & Operations.

  3. Open the resources list in Identity and Access Management and review the tags on each resource.

  4. Alternatively, use the OVHcloud API console at https://eu.api.ovh.com/console/ (or your region's console). Run GET /iam/resource and check the tags of each resource.

  5. If any resource is missing required tags, follow the implementation steps.

Implementation Steps

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Identity, Security & Operations.

  3. Open the resource in Identity and Access Management and add the required tags.

  4. Alternatively, run POST /iam/resource/{resourceURN}/tag in the API console for each tag.

Backout Plan

  1. Remove the added tag from the resource in the Control Panel, or run DELETE /iam/resource/{resourceURN}/tag/{key}.

Reference