WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Sep 27, 2023

OPA for the cloud natives

Philipp Krenn

Are your security checks tightly coupled to your code? Open Policy Agent decouples them. Discover how shifting left with policy-as-code automates your cloud-native governance.

Pause
Mute Enter Fullscreen
#1 about 3 min

Decoupling security checks from deployment pipelines

How separating security policies from application code enables continuous auditing and compliance.

#2 about 3 min

Classifying security incidents and proactive prevention

Why catching policy violations in continuous integration is preferable to relying on tribal knowledge or vendor fixes.

#3 about 3 min

Core concepts and architecture of Open Policy Agent

How OPA evaluates queries against policies and data to return decisions across different APIs.

#4 about 4 min

Writing basic access and resource policies in Rego

Examples of using Rego to enforce user access limits, management hierarchies, and container registry origins.

#5 about 2 min

Enforcing policy validations in continuous integration pipelines

How companies use OPA to validate Terraform plans against policies before allowing pull request merges.

#6 about 4 min

Testing and debugging rules in the OPA playground

A live demonstration of evaluating both simple and complex Kubernetes label policies within the interactive Rego environment.

#7 about 1 min

Deployment models for co-locating OPA instances

Best practices for embedding OPA as a Go library or running it as a co-located daemon set to minimize latency.

#8 about 4 min

Validating data queries and infrastructure security configurations

How OPA can enforce rules on Elasticsearch queries and validate Kubernetes environments against CIS benchmarks.

#9 about 4 min

Optimizing performance and overcoming Open Policy Agent barriers

Insights into profiling Rego queries to enhance speed alongside the challenges of adopting the complex language ecosystem.

#10 about 3 min

Audience questions on data formats and deployment environments

Responses regarding Rego's support for JSON and YAML alongside non-Kubernetes OPA deployments and API integrations.

Matching moments

7:07 min

Implementing programmatic policy checks with Open Policy Agent

Madhu Akula · LIVE

2:41 min

Usability and syntax challenges with rego and opa

Chris Nesbitt-Smith · LIVE

1:54 min

Expanding Open Policy Agent across diverse ecosystems

Anderson Dadario +1 · LIVE

2:03 min

Uploading and evaluating Open Policy Agent rules dynamically

Anderson Dadario +1 · LIVE

1:43 min

Defining and evaluating access policies using Rego

Anderson Dadario +1 · LIVE

2:44 min

Replacing verbose XACML with Open Policy Agent

Anderson Dadario +1 · LIVE

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
over 2 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
over 2 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
over 2 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
over 2 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Give the Agent a Budget, Not a Token

Sachin Malhotra

MTS @Anthropic

Sachin Malhotra
Open session

World Congress 2026 North America

Closing the Visibility Gap: Lessons from Safety Critical Agentic Systems

Vivek Pandit

Principal Engineer at Cadence

Vivek Pandit
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale

Yoav Gal, Dor Cohen

Yoav Gal
Dor Cohen
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane

Related videos

Decoupled Authorization using Policy as Code thumbnail
32:16
LIVE • almost 6 years ago

Decoupled Authorization using Policy as Code

Anderson Dadario, Denys Vitali

Policy as [versioned] code - you're doing it wrong thumbnail
45:57
LIVE • almost 4 years ago

Policy as [versioned] code - you're doing it wrong

Chris Nesbitt-Smith

The day the chatbot asked for sudo thumbnail
27:48
WWC Europe 2026 • about 1 month ago

The day the chatbot asked for sudo

Alex Olivier

Un-complicate authorization maintenance thumbnail
1:00:00
LIVE • over 2 years ago

Un-complicate authorization maintenance

Alex Olivier

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue thumbnail
23:29
WWC 2025 • 12 months ago

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue

Deepu

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.