Grouping resource metadata tags

1. A system comprising:

one or more processors and corresponding memory configured to:

create one or more tag groups comprising a plurality of attributes, the one or more tag groups associated with an account of a provider network of a service provider that provides computing resources as a service for clients of a plurality of accounts;

determine one or more computing resources provisioned on behalf of a client of the account; and

subsequent to said determine,

apply one or more of the tag groups associated with the account to metadata maintained for the one or more provisioned computing resources to tag the one or more provisioned computing resources with the attributes of the one or more tag groups being applied.

2. The system of claim 1 ,

wherein the one or more processors and corresponding memory are configured to:

provide an interface configured to receive requests to create tag groups; and

receive, via the interface, a tag group creation request to create one or more tag groups; and

wherein said create the one or more tag groups is performed in response to receipt, from the client via the interface, of the tag group creation request.

3. The system of claim 2 ,

wherein the one or more processors and corresponding memory are configured to:

in response to receipt of the tag group creation request,

determine, according to an access control management service, that the client of the account is authorized to create the one or more tag groups; and

wherein said create the one or more tag groups is performed based on the determination that the client is authorized.

4. The system of claim 2 , wherein:

the tag group creation request comprises a plurality of metadata keys and a plurality of metadata values, and

the one or more attributes of the tag group comprise the plurality of metadata keys and the plurality of metadata values.

5. The system of claim 1 ,

wherein the one or more processors and corresponding memory are configured to:

provide an interface for receiving requests to provision computing resources; and

receive, via the interface, a request to provision one or more computing resources; and

where said determine one or more computing resources is based on the request.

6. The system of claim 1 ,

wherein the one or more processors and corresponding memory are configured to:

provide an interface for receiving requests from clients to apply one or more tag groups to one or more computing resources; and

receive, via the interface, a request to apply one or more tag groups to the one or more computing resources; and

wherein said apply one or more tag groups is performed in response to receipt of the request.

7. The system of claim 6 ,

wherein the one or more processors and corresponding memory are configured to:

in response to receipt of the request to apply one or more tag groups,

determine, according to an access control management service, that the request to apply one or more tag groups is authorized; and

wherein said apply one or more of the tag groups is performed based on the authorization.

8. The system of claim 1 , wherein the one or more processors and corresponding memory are configured to:

receive, from a second client, a creation request to establish a second resource attribute group, wherein the creation request comprises a second plurality of attributes;

determine, according to an access control management service, whether the second client is authorized to establish the second resource attribute group; and

create, based on the authorization, the second resource attribute group in response to the creation request, wherein the resource attribute group indicates the second plurality of attributes.

9. A method, comprising:

performing, by one or more computing devices:

creating one or more tag groups comprising a plurality of attributes, the one or more tag groups associated with an account of a provider network of a service provider that provides computing resources as a service for clients of a plurality of accounts;

determining one or more computing resources provisioned on behalf of a client of the account; and

applying, subsequent to said determining, one or more of the tag groups associated with the account to metadata maintained for the one or more provisioned computing resources to tag the one or more provisioned computing resources with attributes of the one or more tag groups being applied.

10. The method of claim 9 , further comprising:

providing an interface configured to receive requests to create tag groups; and

receiving, via the interface, a tag group creation request to create a tag group; and

wherein said creating the one or more tag groups is performed in response to said receiving the tag group creation request.

11. The method of claim 10 , further comprising:

determining, in response to receiving the tag group creation request and according to an access control management service, that the request to create the one or more tag groups is authorized;

wherein said creating the one or more tag groups is performed based on the authorization.

12. The method of claim 10 , wherein:

the tag group creation request comprises a plurality of metadata keys and a plurality of metadata values, and

the plurality of attributes comprise the plurality of metadata keys and the plurality of metadata values.

13. The method of claim 9 , further comprising:

receiving, via an interface from the client, a request to provision one or more computing resources;

wherein said determining one or more computing resources is based on the request.

14. The method of claim 9 , further comprising:

providing an interface for receiving requests to apply one or more tag groups to one or more computing resources; and

receiving, via the interface, a request to apply one or more of the tag groups to the one or more computing resources; and

wherein said applying one or more of the tag groups is performed in response to receiving the request.

15. The method of claim 14 , further comprising:

in response to receiving the request to apply one or more tag groups,

determining, according to an access control management service, that the request to apply one or more tag groups is authorized;

wherein said applying one or more of the tag groups is based on determining the request is authorized.

16. The method of claim 9 , further comprising:

receiving, from a second client, a creation request to establish a second resource attribute group, wherein the creation request comprises a second plurality of attributes;

determining, according to an access control management service, whether the second client is authorized to establish the second resource attribute group; and

creating, based on the authorization, the second resource attribute group in response to the creation request, wherein the resource attribute group indicates the second plurality of attributes.

17. One or more computer-readable storage media storing instructions that, when executed on or across one or more processors, cause the one or more processors to:

create one or more tag groups comprising a plurality of attributes, the one or more tag groups associated with an account of a provider network of a service provider that provides computing resources as a service for clients of a plurality of accounts;

determine one or more computing resources provisioned on behalf of a client of the account; and

apply, subsequent to said determine, one or more of the tag groups associated with the account to metadata maintained for the one or more provisioned computing resources to tag the one or more provisioned computing resources with the attributes of the one or more tag groups being applied.

18. The one or more computer-readable storage media of claim 17 , further comprising instructions that, when executed on or across the one or more processors, cause the one or more processors to:

provide an interface configured to receive requests to create tag groups;

receive, via the interface, a tag group creation request; and

perform said create one or more tag groups in response to said receipt of the tag group creation request.

19. The one or more computer-readable storage media of claim 18 , further comprising instructions that, when executed on or across the one or more processors, cause the one or more processors to:

in response to receipt of the tag group creation request,

determine, according to an access control management service, that the request to create the one or more tag groups is authorized; and

perform said create the one or more tag groups based on the authorization.

20. The one or more computer-readable storage media of claim 18 , wherein said receive a tag group creation request comprises receive a request comprising a plurality of metadata keys and a plurality of metadata values.