Tag-based access control rules
Tag Policies
Tag policies let admins gate showback views, schedules, and remediation approvals on resource tags. A new policy editor walks teams through scoping access to a department or environment without touching IAM. Tag inheritance from AWS Organizations is honored throughout the policy engine.
What's in this release
- New Tag policy editor: gate ZopNight views and actions on resource tag values
- New AWS Organizations tag inheritance is now respected in policy evaluation
- Improved Policy violations now include a one-click "request access" flow for end users
- Fixed Policy preview no longer mis-classifies resources missing the tag key