Should user Alice be allowed to read credit reports? Should a cloud instance be deployable without basic security configuration in place? Should service X be allowed to query the database?

Policy defines the rules of our systems, but how do we ensure our policies are enforced consistently in increasingly distributed and diverse tech stacks?

In this talk we’ll explore the benefits of decoupling policy from our applications, deployment pipelines, and platforms and how Open Policy Agent (OPA) can help unify the way we work with policy across the stack.

Speaker

Anders Eknert is a developer advocate and a member of the open-source team at Styra with a long background in software development, security, and identity systems in primarily distributed environments. When not in front of his computer, he enjoys watching football, cooking, and Belgian beers.

Agenda

17:15 - 17:30: In-person welcome
17:30 - 18:30: "Distributed authorization with Open Policy Agent" by Anders Eknert
18:30: Open discussions