⁴ AWS Service Catalog supports tag-based access control for only actions that match API operations with one resource in the input. ⁵ API access to Trusted Advisor is through the AWS Support API and is controlled by AWS Support IAM policies.
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html