Tag
Sharing a central VPC across AWS accounts in a landing zone, and using subnet tags to keep isolated, private and transit-gateway subnets straight per account.