A model represents a cloud service to be provisioned over a cloud. A policy guides provisioning and subsequent management of the cloud service. The model is modified by introducing code corresponding to the policy into the model, the introduced code to perform at least one action with respect to a rule of the policy, the at least one action selected from among validating the rule and performing remediation with respect to the rule. Responsive to the modifying of the model, a set of instructions is generated including code for deploying an instance of the cloud service according to the model, and the introduced code to perform the at least one action with respect to the rule.