1. A method comprising: providing, by a computer system, a service using a plurality of components, the plurality of components including a first component and a second component, wherein the first component is a child of the second component, and wherein a first resource pool is provided to the first component from a second resource pool that is available to the second component; providing, by the computer system, a first anomaly detection and resolution component (ADRC) for detecting one or more anomaly events for the first component; providing, by the computer system, a second ADRC for detecting one or more anomaly events for the second component; monitoring, by the first ADRC, a first metric related to the provided service; based on monitoring the first metric, detecting, by the first ADRC, a first anomaly event based on determining that a first set of one or more measures has been satisfied, the first set of one or more measures defining the first anomaly event, the first set of one or more measures including a first limit and a second limit, and wherein determining that the first set of one or more measures has been satisfied comprises determining that a value of the first metric is outside a range defined by the first limit and the second limit; and responsive to detecting the first anomaly event: identifying, by the first ADRC, a first policy for handling the first anomaly event, the first policy comprising a first set of one or more rules; identifying, by the first ADRC, that a first rule from the first set of one or more rules in the first policy is satisfied by the first anomaly event; determining, by the first ADRC, a first corrective action based on the first rule; and initiating, by the first ADRC, the first corrective action.