A security policy enforcement point placed between cloud service consumers and providers to combine and enforce enterprise security policies as cloud-based resources are accessed.