Love, Hate, and Policy Languages
Talkat AppDeveloperCon Europe 2024 · on Tuesday, 2024-03-19· at 09:50· Pavilion 7 | Level 7.3 | Room S04·
summary
Argues that modern authorization needs a structured, decentralized layer because microservices, multiple databases, high delivery velocity and fine‑grained data ownership create scale and confidence problems; compares actual tools and tradeoffs: OPA (Rego) is extremely flexible but complex, AWS Cedar guarantees fast, bounded decision latency yet struggles with relationship graphs, OpenFGA targets relationship‑based models with a graph engine, and an admin layer called OPAL is offered to run these engines near apps; claims these patterns and tools work in production.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 2:07Declarative languages evolution
- 5:19Domain-specific declarative languages
- 6:44Policy decision challenges
- 11:00Structuring policy decisions
- 13:53Policy decision patterns
- 16:40Policy models and applications
- 21:38Implementing policy languages
- 23:02Policy languages comparison
- 26:11Open-source policy tools
related talks
32mAuthz as a Dev Workflow: Architecting Better Cloud Native Apps
51mPermissions: Centralized or Decentralized? Both!
25mThe right feature at the right place: the example of authorization
39mSoftware is a meal best served with different architectural spices
18mTurning Policies, Standards, and Governance Into Enablers for Open-Source Innovation
41mSoftware Architecture in a DevOps World
37mHiding The Lead
01h 03mThe Language of the System