diff --git a/vpc-flow-logs.tf b/vpc-flow-logs.tf
index 497a2ad3a..209ccc533 100644
--- a/vpc-flow-logs.tf
+++ b/vpc-flow-logs.tf
@@ -90,6 +90,7 @@ resource "aws_iam_policy" "vpc_flow_log_cloudwatch" {
 
   name_prefix = "vpc-flow-log-to-cloudwatch-"
   policy      = data.aws_iam_policy_document.vpc_flow_log_cloudwatch[0].json
+  tags        = merge(var.tags, var.vpc_flow_log_tags)
 }
 
 data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {