Presentation: Beyond Entitlements for Cloud-Native
Abstract
A Policy Engine is a tool that allows for checking user privileges as well as evaluate a responsibility matrix based on dynamic data for a given user. A Policy Engine is not only an Entitlement Management System but also provides for functional evaluation of conditions that result in deterministic responsibilities for a given user or actor.
This session shows how we use Open Policy Agent with Spring Boot and HOCON to produce a responsibility management solution that scales to volume and performance needs. We also show some hiccups that we faced while deriving the most optimal solution for our needs. A short explanation of some tooling we built for validating the policy files in the IDE will also be discussed.
Similar Talks
Inside Job: How to Build Great Teams Within a Legacy Organization?

Engineering Director @Meetup
Francisco Trindade
Self-Selection for Resilience and Better Culture

Agile/DevOps Trainer & Founder of Agile Play Consulting, LLC
Dana Pylayeva
CockroachDB: Architecture of a Geo-Distributed SQL Database

CockroachDB maintainer, Co-founder & CTO @CockroachDB
Peter Mattis
Breaking Hierarchy - How Spotify Enables Engineer Decision Making

Senior Engineering Manager, Data and Machine Learning Infrastructure @Spotify
Kristian Lindwall
Context Matters: Improving the Performance and Wellbeing of Teams

Director of IT @Etsy
Shawn Carney
Maintaining the Go Crypto Libraries

Cryptogopher @Google
Filippo Valsorda
Video Streaming at Scale

IBM Distinguished Engineer, CTO Watson Media Cognitive Solutions @IBM
Lysa Banks
Machine-to-Machine Interfaces

Sr. Consultant, AppDev @awscloud
Ari Lerner
Building and Operating a Serverless Data Pipeline

Director Of Engineering at Intent