OPAL

OPA vs OpenFGA vs Cedar: comparing policy engines for fine-grained authorization. Strengths, trade-offs, and use cases of OPA, OpenFGA, and Cedar for scalable access control.

Learn about Policy as Code, its use cases, and challenges from leading software developers. Discover tools and frameworks for policy as code implementation, and dive into policy languages like Rego, Cedar, and OpenFGA.

Explore how AI in Identity Access Management (IAM) is changing to address the complexities of generative AI. Learn about the challenges and solutions for managing AI-driven identities, permissions, and access control.

Learn how AI identity security is reshaping Identity and Access Management (IAM) and how to tackle these changes with proactive identity security.

Open Policy Administration Layer (OPAL) is an open-source administration layer for OPA and AWS' Cedar Agent that allows you to keep your authorization layer up-to-date in real time

Discover the possible tradeoffs when building fine-grained authorization (FGA). Learn from a real-world use case how to examine such tradeoffs and build better software.

Learn how to implement hybrid cloud security using the multi-layer approach. Explore best practices with practical examples of IAM security and authorization.

Policy languages and frameworks like OPA, Cedar, and OpenFGA are rising in popularity. Explore the solutions they provide, and the benefits of using them.

Learn best practices for implementing ABAC (Attribute-Based Access Control) in application authorization, including real-world use cases and code examples.

Learn from a real case study how to Shift-Left in a way that will impact the product's security. Minimize friction between security and development teams.

Learn how to implement Relationship-Based Access Control (ReBAC) with OPA - an open source policy engine for controlling access to systems and resources.

Learn how to build a Cedar-based application authorization system. A practical tutorial to build a comprehensive auto-scaled solution with OPAL and Cedar agent.

The launch of AWS' OSS - Cedar is a tectonic shift in the IAM space. Permit.io supports with OPAL and Cedar-Agent.

OPAL, an open-source project, complements and enhances OPA and is already being used by companies like Cisco and the NBA.

How Netflix solved the challenge of authorizing millions of users by using OPA, how you can adopt this solution, and possibly create something even better

IAM is huge in DevSecOps, with seemingly infinite buzzwords and terms. Here are the main ones every engineer and security professional should know.

An Intellyx BrainBlog for Permit.io by Jason English

Cloud-based SaaS solutions need multi-tenancy. What is Multitenancy? What we can gain from it? How to easily implement it with two simple layers?

A view of OPAL + OPA as an alternative to XACML

A guide to figuring out which data fetching method is best for you, with full knowledge of each method’s ‘Good, Bad, and Ugly’ aspects.

How to Build The Right App Authorization Solution - An Intro to Open Policy Agent

The Bikini Bottom guide to ABAC authorization models and their implementation with OPA

The Bikini Bottom guide to RBAC authorization models and their implementation with OPA

Cloud-native / microservice-based products are complex. Building access control and managing permissions for them is only getting worse by the pull request.