#open-policy-agent

Optimizing OPA performance: From arrays to objects

Achieve 99% faster Rego policy execution through optimization.

The Confused Deputy Gets an Agent

A confused deputy is a program with authority that gets tricked into misusing it on someone else’s behalf. The classic example is a…

Implementing Row-Level RBAC on Delta Lake with Trino & Open Policy Agent

tl;dr: A pragmatic way to put SQL-native access control in front of Databricks data without forcing every consumer into Spark

Cerberus: A Secure Access Request Management System with Go, GraphQL, OPA, and AWS S3

Open Policy Agent (OPA) — Understanding Policies, Data, and Decisions

For those who have never heard of Open Policy Agent — which, to be fair, still includes a fairly large chunk of the engineering world — the…

Why Your Authorization Logic Doesn’t Belong in Your Codebase

The Hidden Cost of Hard-Coded Policies

Compile Once, Evaluate Many: Using OPA Correctly in Production

When working with Open Policy Agent (OPA), it’s easy to assume that performance issues stem from complex policy logic. That was my…

Perché Rego ti salva da if, permessi e logiche sparse

Policy centralizzate, testabili e senza deploy inutili

What Enterprise-Grade Authorization for MCP Should Look Like

Part 3 in the series “Securing the Future of AI Agents: AuthN & AuthZ in the Model Context Protocol”

Essential Infrastructure as Code (IaC) Tools for Cloud Computing: Terraform and Its Ecosystem

Terraform is an incredibly powerful Infrastructure as Code (IaC) tool, but as you begin to add complexity to your infrastructure, you may…

How It Works — Validating Admission Policy

The Kubernetes validating admission policy provides a mechanism to allow users to add custom validation policies into the Kubernetes…

Using Gatekeeper’s External Data Provider for Tag to Digest mutation with Skopeo

While I was attempting to create a custom external data provider to help with image validation , I realized the Provider model could be…