Stefan Mikic's Tech RadarStefan Mikic's Tech Radar

🔐 Open Policy Agent (OPA)

policy-as-codesecurity
Trial

Short description:

Open Policy Agent is a general-purpose policy engine that decouples policy decisions from application logic using a declarative language (Rego). It's used to enforce security and compliance rules across systems.

Why it moved to Trial:

After the assessment, OPA is worth using in real projects. Keeping authorization rules as versioned, testable Rego policies instead of spreading them through application code fits well with Keycloak handling authentication.

Assess

Short description:

Open Policy Agent is a general-purpose policy engine that decouples policy decisions from application logic using a declarative language (Rego). It's used to enforce security and compliance rules across systems.