1. A method for enforcing policy-based compliance in launching a virtual machine image configuration, the method comprising: receiving a request to launch a virtual machine image having a plurality of attributes, wherein the request specifies at least a first storage volume to attach to the launched virtual machine image, wherein the first storage volume stores data accessible to the launched virtual machine image once attached, and wherein the first storage volume has associated metadata indicating a measure of sensitive of data on the first storage volume; evaluating the virtual machine image identified in the request and the metadata associated with the first storage volume to determine whether the request conforms to a policy; and upon determining that the virtual machine image identified in request conforms to a policy, forwarding the request to a cloud management platform, wherein the cloud management platform launches the virtual machine image and attaches the launched virtual machine image to the first storage volume.