1. A method for context-based security assurance in a cloud application environment, comprising: querying the cloud application environment and, in response, receiving information on a set of security capabilities available in the cloud application environment; based at least in part on the received information, presenting a set of templates in an editor, wherein a template has associated therewith a security assurance level that is specified in a manner that does not expose at least some specific security requirements necessary to implement the security assurance level, and wherein a template also presents cost information associated with at least one security capability that has been identified; and in response to receipt of a selection of one or more templates, configuring a set of security resources in the cloud application environment; wherein the querying, presenting and configuring steps are carried out in software executing in a hardware element.