## Tag AWS launch templates and fleets

AWS Private Locations now apply `tags` and the reserved `Gatling:` tags to the EC2 launch template and EC2 Fleet they create, not only to the instances, volumes and network interfaces they launch. Deployments no longer get denied in AWS organizations that require tags on `ec2:CreateLaunchTemplate` or `ec2:CreateFleet`, for example with an `aws:RequestTag` condition in a Service Control Policy.

`tags-for` also accepts `launch-template` and `fleet`, to set tags on these resources only:

```hocon
control-plane {
  locations = [
    {
      id = "<location-id>"
      type = "aws"
      tags-for {
        launch-template {
          CostCenter = "1234"
        }
        fleet {
          CostCenter = "1234"
        }
      }
    }
  ]
}
```

Tagging these resources uses the `ec2:CreateTags` permission on `launch-template/*` and `fleet/*` already granted by the [EC2 policy]({{< ref "/reference/deploy/private-locations/aws/installation/#policies" >}}) since Control Plane 2026.25.3. See [the configuration reference]({{< ref "/reference/deploy/private-locations/aws/configuration" >}}).