Deploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent - Peter O'Neill, Styra
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2023-06-25

Deploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent - Peter O'Neill, Styra

So you've heard of Policy-as-Code (PaC) and want to learn what it's all about. Join this workshop to understand what PaC is, and why it matters for your organization.

After this primer on PaC, we will learn how Open Policy Agent (OPA) is uniquely capable of securing Cloud Native stacks that are heterogeneous. Then we will look at some architecture patterns for deploying OPA as close to your services as possible to add security without affecting performance. To streamline our OPA deployment, we will add a centralized point of management for all of the OPAs we deploy.

Finally, we will wrap up by learning how to write policies in the purpose-built policy language called Rego. Rego works hand-in-hand with OPA to deliver Policy-as-Code with the latest industry best practices. While writing Rego has a learning curve with a handful of idioms and some stylistic suggestions, you'll learn to write readable Rego policies, removing any ambiguity from your policy's purpose.