AWS OpsWorks CM now supports assigning tags to OpsWorks CM servers and backups for both OpsWorks for Chef Automate and OpsWorks for Puppet Enterprise. You can define access controls using tags and AWS Identity and Access Management (IAM) policies to control access to resources and actions. Tags are key value pairs you can use to organize resources, search, create cost allocation reports and control access. For example you can allow your development team full access to your staging OpsWorks CM server but restrict access to your production server. 

from Recent Announcements: https://aws.amazon.com/about-aws/whats-new/2019/12/aws-opsworks-cm-supports-tagging-tag-based-access-control/