As more Cloud services emerge, the ability to safely deploy and manage the Cloud Native infrastructure diminishes. Misconfigurations can be costly as breaches occur. Therefore it has become paramount to ensure that cloud pipelines are not only defined correctly but also guarded against any future misconfigurations that can accidentally occur.

In this session we will show how users can leverage Rego, a popular declarative query language to detect misconfigurations in Cloud infrastructure platforms that are bootstrapped with popular Infrastructure-as-Code (IaC) tools such as Terraform and CloudFormation.

We will also showcase our open source project collection of already written Rego policies that are fit for safeguarding against many of the common use cases that we have observed to occur in real life industry scenarios.