The finance department at InnovateCloud Corp needs to enforce project tag compliance for accurate chargebacks across their AWS Organization, where teams use CloudFormation, after discovering inconsistencies in project tag values within their Cost and Usage Reports. What is the LEAST effort approach to enforce project tags on newly created resources?