diff --git a/.gitignore b/.gitignore
index c8a5400..51d5e16 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,7 @@
 .aws-sam/
 samconfig.toml
+.env
+.env.*
 *.pyc
 __pycache__/
 .DS_Store
diff --git a/template.yaml b/template.yaml
index ce01d0d..27cac69 100644
--- a/template.yaml
+++ b/template.yaml
@@ -135,6 +135,11 @@ Resources:
           - Id: expire-access-logs
             Status: Enabled
             ExpirationInDays: 365
+      Tags:
+        - Key: project
+          Value: sh-openswe-traces
+        - Key: role
+          Value: s3-access-logs
 
   TracesLogBucketPolicy:
     Type: AWS::S3::BucketPolicy