techniques for providing identity - enabled interfaces for deployment are presented . specifically , an agent of an enterprise infrastructure authenticates and acquires an agent identity for interacting with a cloud processing environment . once the agent is deployed in the cloud processing environment , enterprise policy can be enforced within the cloud processing environment on actions occurring within the cloud . the agent acts as an application programming interface between the enterprise and the cloud processing environment . the reverse is also achievable , where a cloud deploys an agent to the enterprise to deploy a cloud interface within the enterprise for policy enforcement .