1. A method, comprising: analyzing a managed application to determine policy settings for the managed application, wherein the managed application is to be made available for download to a mobile device, wherein each of the one or more policy settings provides a constraint to be enforced by the mobile device prior to the managed application being provided access to at least one resource that is accessible through an access gateway, wherein the policy settings include at least one first setting specifying that a private secure container, which is to be private to the managed application, is to be configured on the mobile device such that a read or write operation from the managed application is to be redirected to the private secure container, and wherein the policy settings includes at least one second setting specifying that a shared secure container, which is to be accessible by at least one other managed application, is to be configured on the mobile device such that a read or write operation from the managed application is to be redirected to the shared secure container; displaying, by one or more computing devices, a user interface that displays the policy settings; receiving input via the user interface that creates or modifies an application management setting of the policy settings, wherein the application management setting specifies how data associated with the managed application is to be processed by the mobile device in connection with the managed application; producing a policy file for the managed application that includes the application management setting, the at least one first setting, and the at least one second setting; and providing the policy file such that the policy is available for download to the mobile device.