Tag lateral movement in cloud environments