Tags Essenciais para Alocação de Custos Multi-Cloud

# AWS: default_tags apply to every resource in this provider block
provider "aws" {
  region = "us-east-1"

  default_tags {
    tags = {
      team        = "payments"
      environment = "prod"
      cost-center = "eng-4200"
      application = "checkout-api"
      managed-by  = "terraform"
    }
  }
}

# Shared tag map for Azure and GCP resources
locals {
  common_tags = {
    team        = "payments"
    environment = "prod"
    cost-center = "eng-4200"
    application = "checkout-api"
    managed-by  = "terraform"
  }
}

resource "azurerm_linux_virtual_machine" "api" {
  name                = "prod-api-01"
  resource_group_name = azurerm_resource_group.rg.name
  location            = "eastus"
  tags                = local.common_tags
  # ... size, image, nic omitted
}

resource "google_compute_instance" "api" {
  name         = "prod-api-01"
  machine_type = "e2-standard-2"
  zone         = "us-central1-a"
  labels       = local.common_tags
  # ... boot_disk, network_interface omitted
}

# tagging-standard.yaml - single source of truth for the org
required_tags:
  - key: team
    description: Engineering team that owns the resource
    allowed_values: [payments, identity, growth, platform, data]

  - key: environment
    description: Deployment environment
    allowed_values: [prod, staging, dev, sandbox]

  - key: cost-center
    description: Finance cost center code
    pattern: "^eng-[0-9]{4}$"

  - key: application
    description: Logical application name this resource supports
    pattern: "^[a-z0-9-]+$"

  - key: managed-by
    description: How this resource was provisioned
    allowed_values: [terraform, pulumi, helm, manual]

casing: lowercase-hyphen
enforcement:
  aws: organizations-tag-policy + aws-config
  azure: azure-policy-deny
  gcp: terraform-default + opa-in-ci