Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

IMG_0336.jpg

IMG_0337.jpg

:wave: ! I’m attending an interesting Policy session at CiscoLive. It uses OPA to check for network device config conformance to an OPA policy:

The short version what they did in the demo:
• get the config of a cisco router, parse to json
• Using OPA; check for certain values in the json
Should be doable in cerbos right <@U0283CLRWG6> <@U0283CHN8NA> ? But is it ugly or nice-ish..

Absolutely! As long as there is that integration point which can call out to the PDP its certainly possible. Let me find a bit of time later to translate that policy in a Playground.

Something like this <https://play.cerbos.dev/p/ludya2q67ac7a99JGmZljqlXgNv8UA37>

If we need to check a list of interfaces, should we strip the list to seperate resources (each resource being one interface) in our app? I guess that makes for the cleanest validation code right..

Yeah that would save the list manipulation 

Interesting way of doing compliancy checking for configurations. I’ll think about the pros and cons of using cerbos for this. Thanks :pray: