Tag vendor-agnostic IAM