This is indeed one of the benefits of the policy-as-code approach.

And Rego syntax is much easier to grok than other "-as-code" approaches (read: wall-of-yaml)