Achieving compliance in public cloud