Automation & CodeSign in to post
AnalystCode / policy labScenario sim
Policy as Code Workshop: OPA, Rego and Conftest
Write policy as code step by step: Rego syntax and semantics, deny messages that become evidence, opa test, Conftest on Terraform and Kubernetes, a live GitHub Actions check, and a simulator that grades your policies.
150 min 300 XPSkills: Rego, Open Policy Agent, Conftest, Policy testing, GitHub Actions
What you'll be able to do
- ›Write Rego v1 rules with packages, defaults, sets, comprehensions, some and every
- ›Explain true, false and undefined, and how rule bodies combine with or and and
- ›Write deny messages and opa test suites that catch broken policies
- ›Run Conftest on Terraform plans and enforce policies in a GitHub Actions check
- ›Choose between OPA, Conftest, Kyverno, Cedar, Sentinel and Checkov by layer
Loading the lessons...
Next on your path · Automation & Code
Control Checks in CI/CD
Fail a pipeline on a control violation, and design the exception path that keeps engineers moving.
Analyst 50 min 210 XP
Start next room Community
Discussion & writeups
Share how you approached the room or ask where you got stuck. Never paste task answers or full lab solutions: write the reasoning, not the key.
Loading discussion…