Addressing Cloud Security with OPA
summary
Cloud misconfiguration is the leading cloud risk, with 93% of surveyed large organizations worried about breaches; policy as code prevents rapid automated attacks by validating JSON-configured resources before and after deploy. The talk shows using OPA (Open Policy Agent) with a Regla-based toolchain, demonstrates a Regula Terraform plan checker and a Fredo fast evaluator, describes running OPA as a library for billion-plus daily evaluations, and reports these integrations successfully catch IAM, security group and KMS rotation faults.
AI-written summary · about
chapters (12)
- 0:00Cloud security with OPA
- 1:50Cloud misconfiguration risks
- 7:10Hackers exploit misconfigs
- 10:03Manual security fails now
- 13:58Policy as code for security
- 16:27Why OPA stands out
- 21:22Policy as code vs IaC
- 24:55Live OPA security demo
- 27:48OPA architecture
- 30:23OPA tools ecosystem
- 33:30Writing OPA policies
- 37:43OPA resources guide
related talks
41mTaking Command of Cloud Security with OPA- 41mTaking Command of Cloud Security with OPA
38mOPA for the cloud natives
42mDesign Patterns for OPA and Cloud Native Authorization
36mOPA for the cloud natives
36mOpen Policy Agent: security for cloud natives and everyone else
40mOPA Introduction & Community Update
05mLightning Talk: A Secure Software Supply Chain for Open Policy Agency (OPA) Policies