# policy-as-code

Policy as code is an approach that expresses operational and security policies as code so they can be versioned and automatically evaluated.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next

DevFeed: [Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next](<https://devfeed.tech/articles/policy-as-code-in-2026-opa-kyverno-cedar-and-what-s-next-26775.md>)

Original publisher: [Read original article](<https://www.harness.io/blog/policy-as-code-in-2026-opa-kyverno-cedar-and-what-s-next>)

Author: Abhijit Pujare Eric Minick

Published: 2026-09-11T00:00:00Z

Content type: article

Language: en

Sources: [Harness Blog](<https://devfeed.tech/sources/harness-blog.md>)

Topics: [policy-as-code](<https://devfeed.tech/topics/policy-as-code.md>), [Open Policy Agent](<https://devfeed.tech/topics/open-policy-agent.md>), [rego](<https://devfeed.tech/topics/rego.md>), [Kyverno](<https://devfeed.tech/topics/kyverno.md>), [Software Engineering](<https://devfeed.tech/topics/software-engineering.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [JSON](<https://devfeed.tech/topics/json.md>), [YAML](<https://devfeed.tech/topics/yaml.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>)

Tags: [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [json](<https://devfeed.tech/tags/json.md>), [kyverno](<https://devfeed.tech/tags/kyverno.md>), [opa](<https://devfeed.tech/tags/opa.md>), [open-policy-agent](<https://devfeed.tech/tags/open-policy-agent.md>), [policies](<https://devfeed.tech/tags/policies.md>), [policy-as-code](<https://devfeed.tech/tags/policy-as-code.md>), [rego](<https://devfeed.tech/tags/rego.md>), [security](<https://devfeed.tech/tags/security.md>), [software-engineering](<https://devfeed.tech/tags/software-engineering.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

This article surveys the 2026 Policy as Code ecosystem, comparing general-purpose Open Policy Agent and Rego with specialized approaches such as Kyverno, Cedar, and agent-oriented governance. It discusses the shift toward automated, machine-readable governance, the separation of policy from business logic, and the challenges of authoring and maintaining Rego as schemas evolve.

### Source excerpt

| Blog

## Centrally enforce policy as code for GraphQL APIs

DevFeed: [Centrally enforce policy as code for GraphQL APIs](<https://devfeed.tech/articles/centrally-enforce-policy-as-code-for-graphql-apis-23252.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/centrally-enforce-policy-as-code-for-graphql-apis>)

Author: Vivek Ravishankar

Published: 2023-12-12T14:00:00Z

Content type: article

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [policy-as-code](<https://devfeed.tech/topics/policy-as-code.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [API Platform](<https://devfeed.tech/topics/api-platform.md>), [Open Policy Agent](<https://devfeed.tech/topics/open-policy-agent.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [api-platform](<https://devfeed.tech/tags/api-platform.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [opa](<https://devfeed.tech/tags/opa.md>), [policy-as-code](<https://devfeed.tech/tags/policy-as-code.md>)

### AI overview

Apollo describes using GraphOS schema directives to enforce policy-as-code authorization at the type and field levels of federated GraphQL supergraphs. The directives are generally available to GraphOS Enterprise customers and can integrate with authorization systems such as Open Policy Agent.

### Source excerpt

Although many in the industry consider GraphQL a replacement for existing API technologies, it is at its most powerful when used as a central orchestration layer between apps and existing services. This layer, implemented as a federated graph (or supergraph, for short), acts as a self-service API platform that accelerates development velocity for both frontend and backend teams.