User-defined labels that can be applied to DigitalOcean resources (Droplets, volumes, images, load balancers) for organisation, filtering, and automation. Tags enable grouping resources by environment (production, staging), application, or team, and are used as selectors for Cloud Firewalls and API batch operations.
A company tags all production Droplets with `env:production` and `app:checkout`. They create a Cloud Firewall rule that applies to all resources with `env:production`, ensuring new Droplets automatically inherit the correct security rules when tagged — eliminating manual firewall assignment.