[Policy as code] Technical design

deepnetworkgmbh / joseki

Audits cloud infrastructure, visualizes results, reports on issues

Apache License 2.0

8 stars 1 forks source link

[Policy as code] Technical design #223

Open v1r7u opened 4 years ago

v1r7u commented 4 years ago

Policy-as-code projects can help customers to define custom rules on their resources and have the potential to supersede specific scanners (like, polaris, azsk, etc).

We have to design how to integrate external policy-as-code solution to Joseki.

Potential policy-as-code solutions:

https://github.com/open-policy-agent/opa
https://www.inspec.io/
https://azure.microsoft.com/en-us/services/azure-policy/

v1r7u commented 4 years ago

As the very first step, let's find out for what kind of scenarios it could be used