1. A method, comprising: providing a virtualization environment adapted for development and deployment of at least one software workload, the virtualization environment having a metamodel framework that allows the association of a policy to the software workload upon development of the workload that is applied upon deployment of the software workload; allowing a developer to define a security zone and to apply at least one type of security policy with respect to the security zone; including the type of security zone policy in the metamodel framework, such that the type of security zone policy can be associated with the software workload upon development of the software workload; and if the type of security zone policy is associated with the software workload, automatically applying the security policy to the software workload when the software workload is deployed within the security zone.