diff --git a/examples/full-cluster-tf-upgrade/1.22/common-services/tags.md b/examples/full-cluster-tf-upgrade/1.22/common-services/tags.md
new file mode 100644
index 0000000..ab5b05e
--- /dev/null
+++ b/examples/full-cluster-tf-upgrade/1.22/common-services/tags.md
@@ -0,0 +1,20 @@
+# Tagging
+
+## Istio 
+
+For the [AWS Load Balancer Controller](https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.4/guide/service/annotations/#load-balancer-attributes), we want
+to enable the following
+
+* S3 Access Logs
+```
+service.beta.kubernetes.io/aws-load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app
+```
+* Disable IP address persistence (needed for Cumulus, may not be needed for others, will make a variable)
+```
+#service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: stickiness.enabled=true,stickiness.type=source_ip
+service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: stickiness.enabled=false
+```
+* Pass additional tags (from `var.application_tags.auto.tfvars`)
+```
+service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: key=value,key=value
+```