1. An apparatus, comprising: one or more processors in a multi-tenant cloud computing infrastructure; computer memory holding computer program instructions executed by the one or more processors to perform resource security and compliance monitoring in the cloud computing infrastructure, the cloud computing infrastructure comprising a set of network-accessible computing machines and software executed by the one or more processors, the computer program instructions performing following operations: for a given tenant, deriving a security context from cloud resource meta-data and user-specific input data, the user-specific input data being security requirements for the given tenant in the cloud computing infrastructure; encapsulating the cloud resource meta-data and the user-specific input data into a data structure; processing the data structure into a data string that securely and uniquely represents the security context for the given tenant; propagating the data string for the given tenant into machine-based logs generated by one or more cloud resource automation services that monitor the cloud computing infrastructure; associating the data string to activities associated with one or more secure resources as the activities are monitored by the one or more cloud resource automation services to provide context-based visibility for the resource security and compliance monitoring in the cloud computing infrastructure by the one or more cloud resource automation services; and responsive to a request associated with the resource security and compliance monitoring, correlating information from the machine-based logs and that includes the data string to generate a security context-specific response, the security context-specific response associated with a tenant-specific compliance view.