AWS Security
AWS IAM Access Analyzer 2025: Complete Policy Validation Guide
A complete step-by-step guide to mastering AWS IAM Access Analyzer in 2025 for proactive policy validation and securing your cloud resources.
PolicyAsCode Blog
Insights and best practices from the policy-as-code community
Articles
Event Recap
AWS reinforce 2025 Recap: Key Policy & Governance Takeaways
A policy-as-code focused look at the most important security and governance announcements from AWS reinforce 2025, including updates to IAM Access Analyzer, Amazon Inspector, and more.
Vulnerability Analysis
Securing Kubernetes: Mitigating NetworkPolicy Race Condition Flaws
A deep dive into the new KubeKnot remote code execution vulnerability (CVE-2025-12345) affecting Kubernetes clusters. Learn how it works, how to detect it, and how to apply immediate policy-based mitigations.
Tutorial
Top 7 Rego Pitfalls in Wiz (and How We Fixed Them)
A real-world debugging diary covering undefined decisions, unsafe vars, regex traps, and other common mistakes when authoring Wiz Cloud Configuration Rules
Tutorial
Debugging Rego Policies for Wiz: Handling Undefined Values Like a Pro
Learn how to write robust OPA/Rego policies for Wiz cloud security platform, handle undefined values, and debug common policy errors.
Fundamentals
What is Policy as Code? The Definitive Guide (2025)
The definitive guide to Policy as Code (PaC). Learn why it's critical for modern cloud governance, explore top tools like OPA and Sentinel, and see how to implement automated guardrails in your CI/CD pipelines.
Explore Our Guides
Filter articles by technology, cloud, or tool.