Find more details in the AWS Knowledge Center: https://aws.amazon.com/premiumsupport/knowledge-center/iam-policy-tags-restrict/
Fagner, an AWS Cloud Support Engineer, shows you how to use IAM policy tags to restrict how an EC2 instance or EBS volume can be created.