Hi, thanks for your interest in CloudFielder. A policy describes which states of the cloud resources are permitted or not, i.e. security rule or connection. It also describes which actions to take when a violation occurs. An action may be send an email, or evoke an API.