Automating Security and Compliance for Hybrid Environments