Policy maps business and operational requirements, process, and workflow to the following settings and objects stored on the Chef Infra Server: - Roles define server types, such as "web server" or "database server". - Environments define process, such as "dev", "staging", or "production". - Attributes define environment-specific details about a node that are included in a Policyfile. - Certain types of data---passwords, user account data, and other sensitive items---can be placed in data bags, which are located in a secure sub-area on the Chef Infra Server that can only be accessed by nodes that authenticate to the Chef Infra Server with the correct SSL certificates. - The cookbooks (and cookbook versions) in which organization-specific configuration policies are maintained.