Automating security and compliance for hybrid cloud environments