1. A method for applying a security scheme to a network environment within which an application, comprising a cloud service, is to be instantiated, comprising: creating the security scheme based upon an application service model for the application comprising the cloud service that is to be instantiated within the network environment, the security scheme comprising a virtual machine security derived from the application service model, the virtual machine security: designating a role of the cloud service to a virtual machine within which the cloud service is to be instantiated; and defining virtual machine resource access, for the cloud service, to one or more resources of the virtual machine; instantiating the cloud service within the virtual machine hosted by the network environment; and applying the security scheme to the network environment, the applying comprising enforcing the virtual machine security upon the cloud service instantiated within the virtual machine, the enforcing comprising: isolating the role of the cloud service to the virtual machine; and enforcing the virtual machine resource access upon the cloud service.