Tag

policy as code

38 articles

Latest in policy as code

Best Practices

Why We Do What We Do

“Simplicity means that the smallest solution that solves the entire problem is the best solution. It keeps the systems easy to understand and reduces complex component interactions that can cause debugging nightmares.” — The Pract…

Nov 5, 20263 min

All policy as code Articles

Showing 1–24 of 38

Nov01

IBM Extends Scope and Reach of DevSecOps Workflows in the AI Era

IBM is expanding its Terraform infrastructure-as-code platform and Bob AI coding assistant with new policy-as-code capabilities, automated vulnerability remediation and AI governan…

3 min

Oct26

Blogs

Implementing OPA with Terraform the Easy Way

Terraform compliance doesn’t have to mean complicated policy pipelines. By combining TFLint with OPA and Rego, developers can enforce infrastructure guardrails directly in their ed…

3 min

Oct23

The Automation Confidence Gap: When Should AI Be Allowed to Change Production?

AI-generated infrastructure recommendations can look convincing, but production execution requires more than a plausible runbook. A seven-factor confidence index helps platform tea…

3 min

Oct19

Blogs

From Static Scans to Runtime Awareness: The Next Phase of Software Supply Chain Security

A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages ca…

3 min

Sep24

Why Plan Review Stopped Working

The control that held your infrastructure together was plan review, meaning a person reading a diff and deciding whether to approve it. Not the policy document and not the pipeline…

3 min

Aug26

AI Can Generate Your Infrastructure. Can Your CI/CD Pipeline Trust It?

AI-generated infrastructure code is exposing a growing security gap, pushing platform teams to add stronger automated gates, provenance tracking and human review before Terraform,…

3 min

Aug13

The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change

When agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasonin…

3 min

Jul24

AI Agents Are Writing Your Infrastructure Code. Is Anyone Governing It?

AI agents now generate infrastructure code at scale, but security pass rates are stuck at 55%. Here’s how teams can close the governance gap.

3 min

Jul22

Signed, Attested, and Malicious: The Software Supply Chain Has a Deepfake Problem

A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma…

3 min

Jul20

Blogs

HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform

HashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks.

3 min

Jul07

Blogs

How AI is Revamping DevSecOps Processes

Artificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically…

3 min

Jun05

Blogs

Risk-Based Review for Infrastructure as Code Pull Requests

Not every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical rev…

3 min

Apr15

Blogs

FinOps Isn’t Slowing You Down — It’s Fixing Your Pipeline

Stop firefighting cloud costs weeks after deployment. Learn how to “shift cost left” by integrating cost estimates and policy-as-code directly into your DevOps workflows using tool…

3 min

Mar26

Security as Code is Becoming the New Baseline: Continuous Compliance in DevOps

There was a time when compliance meant a quarterly ritual. Someone from security would walk over with a spreadsheet, ask a few questions, tick a few boxes and disappear until the n…

3 min

Mar25

Blogs

Why Investing in DevOps Platforms Pays off for Businesses

Explore why 80% of organizations are adopting Internal Developer Platforms (IDPs) by 2026. From reducing setup time by 40% to mitigating $9,000-per-minute downtime costs, discover…

3 min

Mar18

Blogs

Policy as Code for Cost Control, Not Just Compliance

Policy as code can do more than enforce compliance. Learn how platform teams use guardrails, tagging and sizing policies to prevent cloud cost waste early.

3 min

Feb26

Blogs

How OPA Changed Our Go-No-Go Forever

Learn how Open Policy Agent (OPA) transformed go/no-go releases from subjective meetings into automated, auditable, policy-driven decisions embedded directly in the CI/CD pipeline.

3 min

Feb24

Blogs

GitOps Implementation at Enterprise Scale — Moving Beyond Traditional CI/CD

Traditional CI/CD pipelines hit scaling limits. Learn how GitOps improves deployment reliability, security, and DORA metrics—and what it takes to migrate successfully.

3 min

Feb03

Blogs

What is OPA (Open Policy Agent)?

Open Policy Agent (OPA) is a versatile policy engine designed to handle policy enforcement across cloud infrastructures. It enables users to define and apply policies consistently…

3 min

Nov14

Blogs

GitOps in the Wild: Scaling Continuous Delivery in Hybrid Cloud Environments

A deep dive into scaling GitOps for hybrid and multi-cloud environments, exploring architecture, governance, security, observability and real-world enterprise practices.

3 min

Oct08

Blogs

Common IaC Security Issues and How to Fix Them

Learn the top five Infrastructure as Code (IaC) security vulnerabilities, their fixes, and best practices to prevent misconfigurations, drifts, and breaches.

3 min

Sep30

Blogs

env zero Revamps Infrastructure Automation Platform for AI Era

Env Zero (formerly env0) has revamped its Cloud Governance Platform with AI and MCP support, including a new Static Code Analyzer Agent to streamline IaC governance, compliance, an…

3 min

May22

Blogs

Simplifying Authorization at Scale: The Importance of DevOps Workflows with Flexible, Scalable and Secure Access Control

DevOps has transformed how developers build, deploy, and manage infrastructure and applications, making automation, scalability and rapid iteration core to modern development workf…

3 min