Enforcing tagging while creating resource

This is achievable using a combination of a SCP that requires existence of a tag for a resource, first link below, plus (optionally) Organizations Tag Policies to limit the accepted values for a tag key, second link.

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_example-scps.html#example-require-tag-on-create

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html