A TAG TO RULE THEM ALL: USING AWS TAGS TO ENUMERATE CLOUD RESOURCES

Summary from the TLDR InfoSec newsletter

AWS tags offer a way to attach metadata to a resource, either automatically (like the Name tag) or manually. Several services provide API calls such as ListTags or GetTags, enabling efficient enumeration of resources accessible by an identity. TagNabIt is a tool designed for tag-based brute-force enumeration.