Enforcing Standards on Terraform with HashiCorp Sentinel
Learn to enforce standards on Terraform using HashiCorp Sentinel. Covers policy-as-code basics, writing custom policies, and implementing existing ones in Terraform Cloud workspaces for immediate production use.
Building Modern Access-Control for Cloud Applications with Or Weis - SnykLIVE Recording
Explore modern access control for cloud apps using policy-as-code, best practices, and open-source tools like OPA and OPAL. Learn to tackle complexity in microservices architectures.
Secure Deployments at Scale on AWS - PlatformCon 2023
Learn optimal DevSecOps pipeline architecture for secure, fast deployments at scale on AWS. Explore multi-account structures, pipeline layering, shift-left security, and least privilege deployment roles.
DARCC - The 5 Layers of Modern App Security
Explore the DARCC layers of modern app security: Dependency, Access-Control, Runtime, Configuration, and Container. Learn best practices for securing your software supply chain and enforcing policies.
The Impact of Policy-as-Code on the Software Supply Chain
Explore DevSecOps principles for securing the software supply chain. Learn to automate, version, and implement controls as code for resilient software ecosystems.
Open Policy Agent Deep Dive
深入探讨开放策略代理(OPA)在微服务和Kubernetes中的应用,包括核心语言特性、搜索、组合和复杂数据查询,助您实现"策略即代码"以增强系统控制和可视化。
Securing the Golden Path: Adding Guardrails for Developers Without Compromising Agility
Panel discussion on balancing security and agility in cloud-native development, exploring strategies for implementing guardrails without hindering developer productivity.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.
Securing Your Cloud Native Stack with Policy-as-Code and OPA
Explore policy-as-code and OPA for securing cloud-native stacks. Learn implementation strategies and best practices for robust security in modern infrastructure.
What's New with Open Policy Agent Gatekeeper
Explore recent updates and advancements in Open Policy Agent Gatekeeper, enhancing Kubernetes security and policy enforcement capabilities.
12 Essential Requirements for Policy Enforcement and Governance with OSCAL
Explore policy enforcement and governance in Kubernetes using OSCAL. Learn 12 key requirements for multi-cluster environments, focusing on security, compliance, and policy-as-code practices.
Open Policy Agent (OPA) Introduction and Deep Dive
Explore Open Policy Agent (OPA), a versatile policy engine for Kubernetes, service mesh, CI/CD, and infrastructure. Learn about its features, use cases, and recent updates in this informative session.
Introducing the BACK Stack - Building an Internal Developer Platform with CNCF Projects
Explore the BACK stack: a composable Internal Developer Platform using Backstage, Argo CD, Crossplane, and Kyverno to empower developers with self-service capabilities and streamlined software delivery.
Introduction to Open Policy Agent - Rego Language and Kubernetes Policies
Explore Open Policy Agent (OPA) with co-creator Torin Sandall. Learn Rego language basics, write policies for Kubernetes, and run OPA locally using CLI and VSCode.
Policy as Code with Open Policy Agent
Explore decoupling policy from applications and platforms using Open Policy Agent (OPA) to enforce rules consistently across distributed tech stacks, enhancing security and control.
How to Build Kubernetes Policies to Ensure Compliance for Databases
Learn to implement Kubernetes policies for database compliance, covering operator patterns, policy-as-code, webhooks, and integration. Includes a practical policy validation demo.
Malicious Compliance: Reflections on Trusting Container Scanners
Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.
The Compliance Business Case for Kubernetes in the EU - Get Ready for EUCS
Explore EU Cybersecurity Scheme compliance for Kubernetes, focusing on design, enforcement, and auditing using Open Policy Agent and CNCF tools for cloud-native applications.
Generalizing Policy-as-Code for Compliance Posture Management on Multi-Cloud Infrastructure
Explore compliance posture management for multi-cloud Kubernetes infrastructure using ComplianceAsCode and Compliance Operator, enabling flexible policy-as-code implementation for various use cases.
How to Build a Kubernetes Admission Controller from Scratch - Tutorial
Learn to build a Kubernetes admission controller from scratch, exploring fundamentals, installation, and Python implementation. Gain hands-on experience in enhancing cluster security and policy enforcement.
Deploying Policy-as-Code with Readable Rego Policies and Open Policy Agent
Learn to implement Policy-as-Code using Open Policy Agent and Rego language. Explore deployment strategies, centralized management, and best practices for writing clear, effective policies in cloud-native environments.