Posts

OPA - For Terraform

Image
 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  All Credits to this video creator : https://www.youtube.com/watch?v=deu-BpE1L98  https://github.com/open-policy-agent/opa     -- Github library for OPA  List of Adobters : https://github.com/open-policy-agent/opa/blob/main/ADOPTERS.md   Github repo for Regula : https://github.com/fugue/regula  You may have the question if there already have OPA why did you make regula. Well Regula adds to OPA  loads of capabilities , convenience features for doing infrastructure as code security assessment ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ OPA      Sample of Rego Code :    If you are doing Policy as a Code what you are really doing is testing configurations and this really comes down to looking what a configuration is and deciding if this all fair game or possible errors with it.  And in order to expres...

OPA : Introduction to OPA

Image
 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  OPA :  https://www.youtube.com/watch?v=Vdy26oA3py8    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  How OPA works ?  Alice is the customer support rep and she has access to all the service such as (payments / Accounts / Promotions / Notification ) etc . And if she get access to all the system that is not all right . If she decides to bring down all the services she can do which can lead to failure of service. Also if she wants to look up where Bob lives she can do that and find out all his personally identifiable information again this is not Ideal. So what we want to do is put some guard rails into the system to prevent these kinds of things from happening .  In order to get alice do all her job and yet does not hamper the security of the system we are going to put but she cannot do anything that is harmful to the system . In order to do th...