Techniques for controlling resource deployments in a cloud partition of a cloud environment are disclosed. A cloud service provider (CSP) operates the cloud environment where its customers can specify constraints on deployments to their respective partitions (i.e., regions or realms). A partition-specific deployment constraint is a rule that constrains the changes/updates that can be made to one or more specific partitions. A partition-specific deployment constraint applies to at least one partition but may apply to multiple partitions. For example, a partition-specific deployment constraint may apply to one or more regions in a realm. A partition-specific deployment constraint is evaluated at deployment time using the most recent state, or a curated subset thereof, for at least one specific partition. A global deployment orchestrator conditions a deployment, at least in part, on if the deployment satisfies the partition-specific constraint(s) in the target partition.