Resource Tagging

Module: Resource Tagging

Module flag: tagging Enabled by default: yes

---

Overview

The Resource Tagging module queries the Cloud Resource Manager TagBindings API to list GCP resources bound to a specific tag key or key/value pair. Use it for cost allocation audits, compliance verification, and finding resources missing required tags.

---

Enable This Module

GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules tagging

---

Required GCP APIs

gcloud services enable cloudresourcemanager.googleapis.com

---

Required IAM Permissions

Role	Tools that need it
roles/resourcemanager.tagViewer	All tools

---

Tools

gcp_tag_list_resources

Lists GCP resources bound to a tag key (and optionally a specific tag value).

Parameters:

Name	Required	Description
project_id	yes	GCP project ID
tag_key	yes	Tag key namespaced name, e.g. my-org/environment
tag_value	no	Filter to a specific tag value, e.g. production

Returns: Full resource name, tag value ID, namespaced tag name (e.g. my-org/environment/production).

---

Prompt Examples

Tag inventory

"List all resources in project my-project tagged with environment=production."

Compliance audit

"Which resources in project my-project are missing the team tag?"

Cost allocation

"List all resources tagged cost-center=platform in project my-project."

Multi-value tag report

"Show me all resources tagged with the environment key in project my-project and group them by tag value."

---

Related Modules

Module flag	Why you'd combine it
cloudrun	Cross-reference Cloud Run service labels with formal tag bindings
gke	Verify GKE cluster tag compliance
iam	Audit which principals can manage tags on sensitive resources