A team introduces tag-based conditions in access policies. What is a critical governance concern?

1. Whether a cost dashboard can replace the policy.
2. Whether tags automatically encrypt resources.
3. Who can change the tags that influence authorization.
4. Whether every tag value is displayed in uppercase.