Using OPA for Continuous Compliance with Cloud Infrastructure Policy-as-Code - Seguridad Mania.com - España y América Latina

Cloud security is a software engineering problem, not a security analysis one. The engineers that build and maintain cloud infrastructure need policy-as-code tools to ensure cloud security and compliance. Open Policy Agent is an open source standard for policy-as-code that’s ideal for cloud infrastructure. In this talk, Josh Stella, cofounder and CTO at Fugue, will walk through how OPA works and how cloud engineering teams can leverage it for their use cases, including validating infrastructure-as-code and integrating cloud security into CI/CD pipelines. • How OPA and the Rego policy language work for a variety of cloud security use cases • How developers can check Terraform against policy with Regula, an open source tool that uses OPA • How to use OPA with CI/CD tools to integrate cloud infrastructure security into automated delivery pipelines