Taking Command of Cloud Security with OPA
summary
Cloud misconfiguration is the top cloud risk: Fugue’s survey of ~300 orgs reports 84% fear they’re already breached, 92% feel vulnerable, 76% expect misconfiguration risk to rise. OPA is a Go runtime with the Rego (Datalog) policy language and wide adoption (thousands of stars and many adopters). Open-source tools actually built: check Terraform plans with Regula (policy-as-code at plan time), a frego runtime 30–100× faster for large-scale evaluations, and Rego policies run as a Go library or daemon usable at design, deploy, and runtime.
AI-written summary · about
chapters (9)
- 0:00Start
- 1:54Cloud Misconfiguration is the #1 Cloud Risk
- 3:32Cloud Misconfiguration is the #1 Risk
- 5:50How Hacker Strategy Changed with
- 7:22Policy-as-code provides developers with security feedback
- 9:35Open Policy Agent: an open standard for policy-as-code
- 13:53Myth: Infrastructure as code is a perquisite
- 30:12Automating Cloud security with policy- as-code across the SDLC
- 38:46Questions?
related talks
41mTaking Command of Cloud Security with OPA
39mAddressing Cloud Security with OPA
38mOPA for the cloud natives
36mOpen Policy Agent: security for cloud natives and everyone else
39mOPA
36mOPA for the cloud natives
40mOPA Introduction & Community Update
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent