1. A method for context-based security assurance in a cloud application environment, comprising: as an application is being deployed in the cloud application environment, querying the cloud application environment and, in response, receiving information on a set of security capabilities available in the cloud application environment; based at least in part on the received information, presenting a set of templates in an editor, wherein a template has associated therewith a security assurance level that is specified by a set of general security requirements, at least one of the set of general security requirements being specified in a manner that does not expose at least some specific security tooling requirements necessary to implement the security assurance level security requirement, and wherein a template also specifies cost information associated with at least one security capability that has been identified by querying the cloud application environment, together with a maximum level associated with a security environment cost; and in response to receipt of a selection of a template that includes one or more security capabilities that are within the maximum level specified, automatically configuring a set of security resources in the cloud application environment, the set of security resources including the at least one specific security tooling requirement necessary to implement a security capability in the selected template; wherein the querying, presenting and configuring steps are carried out in software executing in a hardware element.