Automating Security and Compliance for Hybrid Clouds