Securing Cloud Deployments using Policy as Code