Dynamic tags are implemented as external processes that run on schedule and their stdout becomes a value of a tag. So if you have, say, a CLI command which spits out AWS labels of a node, hook it up and they'll appear as Teleport tags.