diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0b248d58..1197a3d4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add labels to machine metadata to `AWSMachineTemplate` CRs.
+
 ## [0.1.3] - 2022-03-02
 
 ### Added
diff --git a/helm/cluster-aws/templates/_bastion.tpl b/helm/cluster-aws/templates/_bastion.tpl
index 08a2d5f5..52e2496f 100644
--- a/helm/cluster-aws/templates/_bastion.tpl
+++ b/helm/cluster-aws/templates/_bastion.tpl
@@ -56,6 +56,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
 spec:
   template:
+    metadata:
+      labels:
+        cluster.x-k8s.io/role: bastion
+        {{- include "labels.common" $ | nindent 8 }}
     spec:
       additionalSecurityGroups:
       - filters:
diff --git a/helm/cluster-aws/templates/_control_plane.tpl b/helm/cluster-aws/templates/_control_plane.tpl
index 8866ed18..3909fae6 100644
--- a/helm/cluster-aws/templates/_control_plane.tpl
+++ b/helm/cluster-aws/templates/_control_plane.tpl
@@ -74,6 +74,9 @@ metadata:
   namespace: {{ $.Release.Namespace }}
 spec:
   template:
+    metadata:
+      labels:
+        {{- include "labels.common" $ | nindent 8 }}
     spec:
       ami: {}
       cloudInit: {}