Abstract: Techniques are described for providing security-aware partitioning of processes. An example method includes identifying an integration scenario for optimization in a cloud-based system based on optimization constraints. The identified integration scenario is translated into a directed graph comprising connections between particular flows within the integration scenario. Each flow in the identified scenario is automatically analyzed to determine whether the flow is shareable across processing units associated with a different tenant, and each flow can be annotated in the direct graph with results of the analysis. At least one optimization to the integration scenario is determined based on the annotated directed graph and a set of optimization constraints. An assignment of flows to particular processing units is generated based on the determined at least one optimization.