Every resource that can be tagged should follow this scheme:
- customer: { dcic }
- env: { dev, test, prod, backup }
- service: { backup, [drupal, VCL, website, db }
- role: { storage, [webserver, leader, database] }
- instance: { owner's username }