You can now control access to CloudFormation stacks and resources based on tag values.

from Recent Announcements https://aws.amazon.com/about-aws/whats-new/2019/05/announcing-tag-based-access-control-for-aws-cloudformation/