Taking Command of Cloud Security with OPA
summary
Open Policy Agent (OPA) and its Rego language are shown as a concrete policy-as-code stack: OPA runs as a daemon or library, Rego expresses checks like a four-line KMS rotation deny rule, and Fugue ships Regula to check Terraform plans pre-deploy and Frego as a faster runtime. A 300‑organization survey reports 84% fear unknown breaches, 92% feel vulnerable, 76% expect misconfiguration risk to rise, and Fugue reports doing billions of OPA evaluations a day; Frego claims 30–100× faster large-data evaluations.
AI-written summary · about
chapters (9)
- 0:00Start
- 1:54Cloud Misconfiguration is the #1 Cloud Risk
- 3:32Cloud Misconfiguration is the #1 Risk
- 5:50How Hacker Strategy Changed with
- 7:22Policy-as-code provides developers with security feedback
- 9:35Open Policy Agent: an open standard for policy-as-code
- 13:53Myth: Infrastructure as code is a perquisite
- 30:12Automating Cloud security with policy- as-code across the SDLC
- 38:46Questions?
