A Policy-as-Code Approach to RBAC Authorization
summary
Policy as code is implemented with Open Policy Agent (OPA) and Rego and deployed via a lightweight ROND sidecar that decouples authorization from application logic while remaining OpenAPI compliant the system runs on more than 30 microservices managing over 5,000 policies across 300+ routes ROND adds query generation to filter responses and response-transformation policies it reports usage and evaluation time metrics and integrates without modifying existing services so the approach works at production scale
AI-written summary · about
chapters (11)
- 0:00Introduction and Speaker Background
- 0:26Understanding Policies
- 1:32API Authorization Strategies
- 2:30Role-Based Access Control (RBAC)
- 3:22Attribute-Based Access Control (ABAC)
- 4:16Hybrid Access Control Approach
- 6:33Implementing Policies as Code
- 7:50Open Policy Agent (OPA)
- 9:55Introducing ROND
- 10:49ROND Features and Use Cases
- 13:30Conclusion and Invitation
related talks
31mDeploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent
16mDistributed application level RBAC with OPA
32mImplementing Authorization
38mPolicy as Code with Open Policy Agent
34mFine-grained Authorization in a Containerized World
37mMake your security policy auditable
25mMake Your Security Policy Auditable
32mOPA: So What Does the Policy Do?