Service Composer provides policy object and policy enforcement points (PEPs) to help you provision and assign network and security services to applications in a virtual infrastructure. You map these services to a security group, and the services are applied to the virtual machines in the security group.