Terraform Enterprise with OPA: Reducing Toil and Improving Security
Explore how OPA enhances Terraform Enterprise security, reduces toil, and improves multi-tenant workspace management. Learn to offload validations and implement disaster prevention measures.
Securing Cloud Native Resources with Open Policy Agent
Explore Open Policy Agent for securing cloud-native resources, covering fundamentals, integration with Kubernetes, and strategies for enforcing security policies in dynamic environments.
Overcoming CVE Shock - Adding Perspective in Vulnerability Scanning
Explore vulnerability scanning in Kubernetes, covering auditing, security mechanisms, and CI/CD integration. Learn to overcome challenges and implement effective security measures.
Tools to Help You Secure Your Kubernetes Cluster
Explore 7 essential tools for enhancing Kubernetes cluster security, covering internal complexities and workload protection best practices.
A Container Platform for the Banking Industry - Why, What & How
Explore the creation of a compliant container platform at ABN AMRO using EKS, OPA, and Twistlock. Learn from successes and failures in building a secure, scalable solution for enterprise workloads.
Exploring Best Practices for Implementing Authentication and Authorization in a Cloud-Native Environment
Discover best practices for implementing authentication and authorization in cloud-native environments, exploring standards like OpenID Connect and tools including Keycloak, OPA, OpenFGA, and Topaz.
Fine-grained API Authorization Using 3scale and Authorization Systems
Explore fine-grained API authorization using 3scale and systems like Keycloak and Open Policy Agent. Learn about mechanisms, benefits, and implementation challenges.
Open Policy Agent: Introduction and Applications in Software Systems
Enforce policies on software systems using the open-source OPA engine for microservices, CI/CD, Kubernetes, and more.
OPA - Extended Kubernetes Controller for Cloud-Native Security Policies
Explore creating security policies for Kubernetes using OPA, a unified framework for policy across the cloud-native stack.
Zero Trust Authorization with Open Policy Agent
Implement zero-trust architecture using Open Policy Agent (OPA) for flexible, unified access control across networks and tech landscapes.
Pod Security Policy is Dead, Long Live... What's Next?
Explore alternatives to deprecated Pod Security Policies in Kubernetes, understanding their importance and discovering new solutions for securing your clusters.
Automating Configuration and Management of GitHub Repositories with Minder
Learn to automate GitHub repository management using Minder, an open-source platform. Write custom Rego rules to enforce security policies across multiple repositories, enhancing supply chain security.
Application-Aware Layer-7 Security Framework for Cloud APIs Using Large Language Models
Explore an innovative security framework leveraging LLMs to prevent application layer threats against cloud API workloads, enhancing policy definition and enforcement across applications.
A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity
Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.
Securing Your Supply Chain with an Open Source Ecosystem
Explore open-source tools and best practices for securing software supply chains across creation, build, deployment, and runtime stages. Learn to leverage automation and DevSecOps to reduce vulnerabilities.
From Code to Cloud: Quality Kubernetes Deployments with Monokle
Master Kubernetes deployments using open-source tools. Learn to install apps, configure resources, implement OPA validation, use Kustomize overlays, and compare deployments for efficient cloud-native development.
AuthZEN: The OpenID Connect for Authorization - A New Standard for Cloud-Native Authorization
Discover how AuthZEN is revolutionizing cloud-native authorization standards through unified APIs, exploring both policy-as-code and policy-as-data approaches while ensuring vendor independence and interoperability.
Powering Automatic Authorization in Envoy Through Live Traffic Inspection
Discover how to leverage live traffic inspection for automatic authorization in Envoy, using CNCF Pixie to generate OPA policies and implement effective service-to-service access controls.
Your Cheat Code for API Authorization - From OpenAPI to Fine-Grained Access Control
Discover how to implement fine-grained API authorization using Topaz, an open-source service compatible with Open Policy Agent and Google Zanzibar ReBAC model, to manage complex microservices security effectively.
Policy-as-Code for Infrastructure-as-Code with OPA and OpenTofu
Discover how to automate infrastructure management using Open Policy Agent (OPA) and OpenTofu, implementing policy-as-code to prevent unwanted changes and enforce compliance standards.
Open Policy Agent (OPA) Introduction and Deep Dive with V1.0 Update
Dive into Open Policy Agent (OPA), exploring policy decision-making across cloud native stacks, from application authorization to Kubernetes admission, with insights into v1.0 features and updates.