How to give access to all AWS resources based on a resource tag?

Question

I’m trying to create an IAM Admin role that has access to all AWS resources, across all services, that have a specific tag. In other words, I need the equivalent of AWS’ nat