VPC execution policy