Managing Infrastructure Compliance Using OPA and Terraform

Learn to implement infrastructure compliance checks using Open Policy Agent (OPA) within Terraform workflows in this 28-minute conference talk. Discover how Policy as Code addresses the challenges of manual infrastructure reviews that are slow, error-prone, and inconsistent as organizations scale their cloud infrastructure. Explore the process of writing and applying Rego policies to enforce critical security, cost, and governance controls including mandatory tagging requirements, resource naming conventions, and prevention of insecure configurations such as public S3 buckets or overly permissive security groups. Gain practical insights into automating compliance enforcement across development teams while maintaining infrastructure security and governance standards at scale.