One Policy, Every Cloud