Resource Tags and Resource Locks

Resource tags are name-value pairs of metadata that you attach to Azure resources, resource groups, and subscriptions. Unlike folder structures, tags allow a single resource to be categorised in multiple dimensions simultaneously. For example, a VM can have tags Environment=Production, Team=Backend, CostCentre=CC-042, and Project=Phoenix all at once, enabling filtering by any of those dimensions independently.

Organisations typically define a standard tagging taxonomy covering several dimensions. Financial tags (CostCentre, BudgetOwner) enable cost allocation. Operational tags (Environment, Criticality, Owner) support filtering and alerting. Lifecycle tags (AutoShutdown, ExpiryDate) enable automation. Security tags (DataClassification, Compliance) support security tooling. Defining the taxonomy before deploying resources prevents an inconsistent, un-queryable tag landscape.