An automated security survey generator for provisioning services in a cloud environment. Services, including infrastructure services, provided by the cloud are provisioned from blueprints. A survey is attached to each of the blueprints. When a service is provisioned, the attached survey is executed such that questions are presented to a requestor. Responses to the questions and actions are evaluated and actions associated with the responses are performed. The survey can prevent the service from being provisioned.