Exercise 2: Why Untagged Resources Complicate Cost Investigation — Possible Solution
====================================================================

Why untagged resources make investigation harder:

When a cost anomaly is detected, per the chapter, investigation
happens by breaking spend down "by service, by resource, by
tag/label." A tag typically records information like which team,
project, or purpose a resource belongs to. Without that information,
a resource showing up as a source of unexpected spend is essentially
ANONYMOUS from a cost-attribution standpoint -- it's clear THAT it's
costing money, but not WHO owns it, WHY it exists, or whether it's
still actually needed.

This turns what should be a quick, targeted investigation ("this spend
spike belongs to Team X's forgotten test environment, they can confirm
whether it's still needed") into a much slower, more manual one --
someone has to track down the resource's origin through other means
(deployment history, asking around, correlating creation timestamps
with other records) just to figure out who to even ask about it,
before the actual cost question can be resolved at all.

At scale -- an organization with hundreds or thousands of resources --
this problem compounds significantly: a handful of untagged resources
might be manageable to track down manually, but a large proportion of
untagged resources can make systematic cost attribution effectively
impractical.

The proactive step that prevents this problem:

Applying a consistent TAGGING POLICY at the time resources are
CREATED -- requiring every resource to be tagged with, at minimum, an
owning team/project -- rather than trying to retroactively figure out
ownership after a resource has already become a mystery line item on a
bill. Per the chapter, this is called out directly as "the single most
valuable practice for making cost investigation possible at all."

WHY THIS WORKS AS AN ANSWER
------------------------------
This explains the actual mechanism by which tagging enables
investigation -- turning an anonymous cost source into an attributable
one -- rather than simply asserting that tagging is good practice, and
it ties the proactive fix (tag at creation time) directly back to the
chapter's own explicit statement calling tagging the single most
valuable practice for this purpose.