Lviv DevOps Conference 2019 ОЛЕКСАНДР СНІГОВИЙ «Extension of DevOps: Policy as Code» Телеграм канал: https://t.me/GoDevOpsEvent Фейсбук сторінці: https://www.facebook.com/godevopsevent/ Сайт: https://devopsconf.org/

1. Extension of DevOps: Policy as Code
Alexander Snegovoy, DevOps, Kherson

2. • DevOps Engineer in DataArt
• AWS & GCP Certified
• Drive Kherson Cloud/DevOps Community
Who am I?

3. • Automation Journey
• How do we get to policy as code?
• Examples
• Future?
Agenda

4. Ways to manage infrastructure

5. Ways to manage infrastructure

6. Ways to manage infrastructure

7. Ways to manage infrastructure

8. Ways to manage infrastructure

9. What is next?

10. Policy as Code!

11. • Prevent accidental deletion of resources
• Prohibit changes to some resources
• Enforce tagging
• Express these statements in readable, testable and deployable manner
What is Policy as Code?

12. • Sentinel
• Open Policy Agent
• Chef InSpec
Some examples

13. Sentinel

14. Example

15. Open Policy Agent
 Open Policy Agent (OPA) is a general-
purpose policy engine with uses ranging from
authorization and admission control to data
filtering. OPA provides greater flexibility and
expressiveness than hard-coded service logic
or ad-hoc domain-specific languages. And it
comes with powerful tooling to help you get
started.

16. Example

17. Chef InSpec

18. Example

19. • Compliance team as part of project’s team
• Higher quality
• Poly as Code as a Service
What’s next?

20. Thank you!