Tags
Catalog items can have tags attached to them.
For AWS, these can be zone-id, region and account.
Kubernetes resources have cluster and namespace tags associated with them.
The tags for any catalog item are visible on its page in the sidebar.

Usage
Filters
Tags help filter catalog items in UI (inclusion and exclusion)

Permissions
Scopes can select configs by tag with tagSelector, so Roles can grant access to a limited set of configs.