Anderson Dadario & Denys Vitali

Decoupled Authorization using Policy as Code

What if you could change authorization rules without redeploying your application? See how to manage access control like code.

Decoupled Authorization using Policy as Code
#1about 3 minutes

The challenges of embedding authorization in application code

Embedding authorization logic directly into application code leads to tight coupling, auditing difficulties, and operational overhead when policies change.

#2about 6 minutes

Introducing Policy as Code and Open Policy Agent

Policy as Code decouples authorization from business logic, and Open Policy Agent (OPA) is an open-source engine that implements this pattern.

#3about 3 minutes

How OPA works with a simple Rego policy

A simple example demonstrates how an application delegates authorization decisions to OPA by sending a JSON input to be evaluated against a policy written in Rego.

#4about 2 minutes

Demo of basic policy evaluation using OPA

A command-line demo shows how to run OPA tests, start the server, and use curl to query the policy engine with different inputs to get allow or deny decisions.

#5about 7 minutes

Demo of integrating OPA with a Go API middleware

A Go web service uses a middleware to intercept requests, construct an input object, and query OPA to enforce complex, attribute-based access control rules.

#6about 4 minutes

Dynamically updating authorization policies without downtime

By updating a policy file and reloading it into the running OPA server via an API call, authorization rules can be changed instantly without restarting the application.

#7about 3 minutes

Exploring other use cases for OPA beyond web APIs

OPA can enforce policies in various environments, including Kubernetes admission control, Kafka, and even Linux system access via PAM modules.

Related jobs
Jobs that call for the skills explored in this talk.

Matching moments

Introducing the Open Policy Agent (OPA) and Rego
05:44 MIN

Introducing the Open Policy Agent (OPA) and Rego

OPA for the cloud natives

Introducing Open Policy Agent for custom policies
30:46 MIN

Introducing Open Policy Agent for custom policies

A practical guide to writing secure Dockerfiles

A modern approach using a decoupled authorization service
23:10 MIN

A modern approach using a decoupled authorization service

Un-complicate authorization maintenance

Using the OPA Playground to test and debug policies
11:35 MIN

Using the OPA Playground to test and debug policies

OPA for the cloud natives

Addressing performance and adoption challenges with OPA
20:46 MIN

Addressing performance and adoption challenges with OPA

OPA for the cloud natives

Implementing decoupled authorization with the sidecar pattern
28:28 MIN

Implementing decoupled authorization with the sidecar pattern

Un-complicate authorization maintenance

Exploring OPA deployment patterns and advanced use cases
16:23 MIN

Exploring OPA deployment patterns and advanced use cases

OPA for the cloud natives

Answering audience questions about OPA and Rego
23:53 MIN

Answering audience questions about OPA and Rego

OPA for the cloud natives

Featured Partners

Related Videos

See all videos
OPA for the cloud natives26:23

OPA for the cloud natives

Philipp Krenn

Un-complicate authorization maintenance1:00:00

Un-complicate authorization maintenance

Alex Olivier

Policy as [versioned] code - you're doing it wrong45:57

Policy as [versioned] code - you're doing it wrong

Chris Nesbitt-Smith

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue23:29

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue

Deepu

DevSecOps: Security in DevOps33:20

DevSecOps: Security in DevOps

Aarno Aukia

Great DevEx and Regulatory Compliance - Possible?23:26

Great DevEx and Regulatory Compliance - Possible?

Martin Reynolds

Break the Chain: Decentralized solutions for today’s Web2.0 privacy problems29:31

Break the Chain: Decentralized solutions for today’s Web2.0 privacy problems

Adam Larter

OOP revisited48:42

OOP revisited

Dominik Przybysz

From learning to earning

Jobs that call for the skills explored in this talk.