What Can You Achieve with This Training?

  • Learn to build consistent authorisation and governance policies across applications, APIs, and infrastructure using Open Policy Agent (OPA) and Rego.

  • Apply the Policy as Code approach to manage policy decisions across centralised and distributed environments.

  • Gain practical experience with Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) in realistic scenarios.

  • Develop skills in writing, testing, troubleshooting, and integrating Rego policies into technical systems.

  • Explore policy management approaches for Kubernetes/OpenShift, API security, cloud governance, and virtualisation environments.


The OPA in Practice Training is a two-day, hands-on technical course designed to help engineers develop practical skills in Open Policy Agent (OPA) and Rego.

The course focuses on establishing consistent authorisation and governance decisions across applications, APIs, platforms, and infrastructure. Participants learn how to translate policy requirements into clearly defined decisions, identify the information needed for evaluation, implement rules using Rego, and verify the resulting outcomes.

Through technical demonstrations, guided exercises, and scenario-based workshops, delegates explore the practical aspects of policy development. The programme also covers policy integration, deployment, distribution, and governance practices.

Hands-on activities take place in a browser-based OPA workshop environment, using scenarios related to API authorisation, Kubernetes/OpenShift, cloud governance, and virtualisation. These exercises help participants understand how policy decisions can be designed, tested, and integrated into different technical environments.



For corporate groups, we can organize this training as an on-site private group.
HAVELSAN
ASELSAN
PepsiCo Türkiye
JTI TÜTÜN ÜRÜNLERİ SANAYİ A.Ş.
ING Bank
DHL
MASTERCARD
Huawei
TotalEnergies
Mercedes-Benz Türk A.Ş.
Goodyear
FORD OTOMOTIV SANAYI A.S.
3M COMPANY
Schneider Electric
Central Bank of Azerbaijan
BP Petrolleri
Procter & Gamble (P&G)
Qatar Foundation
Bank Of China
GlaxoSmithKline (GSK)
MORGAN STANLEY & CO Inc
Novo Nordisk
DEUTSCHE BANK
Azerbaycan Cumhuriyeti Emek ve Ahalinin Sosyal Güvenliği Bakanlığı
ACCENTURE

Prerequisites

Participants should have:

  • The ability to read basic JSON and technical configuration files

  • A working understanding of applications, APIs, or infrastructure systems

  • Some scripting or programming experience (helpful but not mandatory)

No previous experience with OPA or Rego is required.

Who Should Attend

This course is suitable for:

  • Engineers responsible for authorisation and governance decisions across applications, APIs, platforms, and infrastructure

  • Technical professionals looking to develop practical expertise in defining, implementing, and testing policies with OPA and Rego

  • Individuals involved in policy integration, deployment, and governance within cloud and virtualised environments

What You Will Learn

By the end of this course, participants will be able to:

  • Explain how OPA enables Policy as Code and distinguish policy decision-making from enforcement.

  • Identify suitable OPA use cases across applications, APIs, and infrastructure.

  • Define a decision contract covering required inputs, trusted data sources, policy rules, and expected outcomes.

  • Model access decisions using RBAC, ABAC, roles, permissions, and contextual attributes.

  • Write and modify Rego policies using structured input and reference data.

  • Perform permitted, denied, boundary, and missing-information tests while troubleshooting unexpected policy results.

  • Compare OPA deployment architectures and explain policy bundles, distribution, and activation.

  • Describe policy ownership, change management, and integration responsibilities.

  • Implement, test, and present a working Rego policy for a practical scenario, including its integration assumptions.

Training Outline

1. Open Policy Agent Fundamentals

  • Introduction to the Policy as Code approach and the challenges addressed by OPA

  • Understanding input, reference data, policy evaluation, and decision outcomes

  • Exploring Policy Decision Points (PDP) and Policy Enforcement Points (PEP)

  • Guided exercise: Tracing a request from its policy requirement through decision-making and enforcement

2. OPA Use Cases

  • Exploring API authorisation and Kubernetes/OpenShift admission scenarios

  • Reviewing governance requirements across cloud platforms, infrastructure, and software delivery workflows

  • Identifying appropriate policy decisions and the responsibilities of integrating systems

  • Scenario exercise: Defining the required decision, supporting facts, and enforcement point

3. Modelling Policies and Access Decisions

  • Examining subjects, roles, permissions, entitlements, actions, and resources

  • Comparing Role-Based Access Control (RBAC) with Attribute-Based Access Control (ABAC)

  • Evaluating authoritative information sources, missing data, exceptions, and decision contracts

  • Workshop: Transforming an incomplete scenario into a structured policy decision worksheet

4. Rego Fundamentals and Policy Testing

  • Understanding packages, rules, queries, input, and supporting data in Rego

  • Working with default behaviour, helper rules, and structured decision results

  • Testing permitted, denied, boundary, and missing-information scenarios

  • Hands-on lab: Evaluating, modifying, and testing policies in the Rego Playpen

5. Architecture, Governance, and Policy Distribution

  • Examining system integration requirements and trusted input data

  • Comparing centralised, nearby shared, and sidecar deployment models

  • Understanding policy modules, bundles, distribution mechanisms, and runtime activation

  • Reviewing policy ownership, approval, change review, promotion, auditing, and rollback procedures

  • Technical demonstration: Following a policy from local development through to distributed release

6. OPA in Action and Scenario Workshop

  • Practising input preparation, policy evaluation, result interpretation, and enforcement

  • Handling missing evidence, rejected requests, and unusable policy decisions

  • Hands-on workshop: Implementing an agreed scenario decision contract using Rego

  • Testing, troubleshooting, and explaining the completed policy and its integration assumptions

Why Choose Us

Leading UK-based global training provider since 1995.

Experience OPA in Practice through Bilginç IT Academy's live and interactive virtual classroom environment. Join a Public course as an individual delegate or arrange a dedicated Private / In-house online training program exclusively for your organization.

  • Delivery Method: Online Instructor-Led
  • Participation Model: Public / Private (In-house)
  • Live and Interactive Training: Connect with your instructor in real time and actively participate through discussions, Q&A sessions, practical exercises, and group activities.
  • Flexible Participation: Join the training from your home, office, or any location with a suitable internet connection.
  • Expert Trainer Network: Learn from experienced trainers with strong industry backgrounds and practical field expertise.
  • Over 30 Years of Training Expertise: Benefit from Bilginç IT Academy's professional training experience since 1995.
  • Worldwide Access: Join our live virtual classrooms from anywhere in the world or arrange a dedicated online training program for your organization.

Experience OPA in Practice in a professional face-to-face classroom environment. Classroom Based training can be delivered as a Public course open to individual delegates or as a dedicated Private / In-house class exclusively for your organization.

  • Delivery Method: Classroom Based
  • Participation Model: Public / Private (In-house)
  • Face-to-Face Learning: Interact directly with your instructor and fellow delegates in an engaging classroom environment.
  • Experienced Trainers: Learn from specialists with extensive industry experience and practical real-world knowledge.
  • Professional Training Environment: Attend training in comfortable, well-equipped classrooms designed to support effective learning.
  • Practical Learning: Depending on the course, reinforce your knowledge through hands-on exercises, scenarios, case studies, and instructor-led activities.

Arrange OPA in Practice as a dedicated Onsite training program for your organization. Bilginç IT Academy trainers can deliver the training at your office or another location of your choice, with the program planned around your team's requirements and business objectives.

  • Delivery Method: Onsite
  • Participation Model: Private (In-house)
  • Training at Your Preferred Location: Organize the training at your company's office or another location selected by your organization.
  • Tailored Course Content: Adapt the training program to your projects, team structure, existing skill levels, and specific business requirements.
  • Team-Focused Learning: Develop your team around a shared knowledge base while strengthening internal collaboration and knowledge transfer.
  • Flexible Scheduling: Plan the training dates, location, and program according to your organization's operational requirements.
  • Worldwide Onsite Delivery: Bilginç IT Academy trainers can travel internationally to deliver dedicated training programs at your preferred location.
Contact us for more detail about our trainings and for all other enquiries!