Re:IAM is hard – Thoughts on $80M fine from the Capital One ...
by alexisread on Saturday August 08, 2020 @11:53AM
(#24092561)
If there happens to be an OPA<->IAM adapter for your AWS resources, OPA allows end to end testing of your policies.
As far as adapters go, I know you can get SQL, Kubernetes, Terraform, Kafka, Envoy, s3 (via Minio), EC2/ECS/Lambda (linux). that would cover most use cases I think.
As far as adapters go, I know you can get SQL, Kubernetes, Terraform, Kafka, Envoy, s3 (via Minio), EC2/ECS/Lambda (linux). that would cover most use cases I think.
https://www.openpolicyagent.org/