- minimal set of resources servers to manage overhead from security scans / requirements - automate tags