Policy as Code

Definition

Expressing and enforcing policies (security, compliance, ops) through versioned code and automated checks.

Why it matters

Scales governance consistently across teams and reduces manual review burden.

Common pitfalls

• Policies without clear remediation guidance.
• Divergent enforcement across environments.

References

• OPA/Gatekeeper (openpolicyagent.org)
• Kyverno (kyverno.io)
• manual/04-platform-engineering/index.md