Architecture: Policy as Code with OPA

A policy change gets approved at 4pm. It needs to reach 600 OPA instances spread across four clusters in three regions. Someone asks three questions. How long until every instance is enforcing the new rule? How do you know none of them silently kept the old one? And if an auditor asks what the system decided at 4:15pm, where exactly do you look? None of these are Rego questions. You can write a flawless policy and still fail all three. They are qu… Read More