Action: GCP > Compute Engine > Instance > Set Network Tags

Set the instance's network tags to the list the GCP > Compute Engine > Instance > Network Tags > * policies call for: tags matching the Network Tags > Approved > Tags patterns (wildcards * and ? are supported) are kept, unapproved tags are removed, and any tag in Network Tags > Required > Items that is missing is added. While a policy list is unconfigured that half is skipped — with no approved patterns no tag is removed, and with no required items no tag is added. Because network tags can be changed on a running instance, the instance is not stopped or deleted.