Governing infrastructure as code using pattern-based policy as code