Insights and best practices from the policy-as-code community
A detailed comparison between the two leading Kubernetes policy engines, OPA/Gatekeeper and Kyverno. Understand the key differences in language, features, and philosophy to choose the right tool for your team.
Learn how to manage the entire lifecycle of Azure Policy—from definition and assignment to remediation—using Terraform. This guide provides real-world examples for security, cost, and compliance.
A practical guide to securing the modern software supply chain using policy-as-code, covering SLSA, SBOM, and Sigstore. Enforce security from code to cloud.
Discover how Policy as Code (PaC) is the key to automating FinOps. This guide provides practical policies for enforcing tags, controlling costs, and eliminating waste in your cloud environments.
Comprehensive guide to the most critical policy-as-code security vulnerabilities affecting DevOps teams in 2025, with practical fixes and prevention strategies.
A complete step-by-step guide to mastering AWS IAM Access Analyzer in 2025 for proactive policy validation and securing your cloud resources.
A policy-as-code focused look at the most important security and governance announcements from AWS re:inforce 2025, including updates to IAM Access Analyzer, Amazon Inspector, and more.
A deep dive into the new KubeKnot remote code execution vulnerability (CVE-2025-12345) affecting Kubernetes clusters. Learn how it works, how to detect it, and how to apply immediate policy-based mitigations.
A real-world debugging diary covering undefined decisions, unsafe vars, regex traps, and other common mistakes when authoring Wiz Cloud Configuration Rules
Filter articles by technology, cloud, or tool.