Policy-as-code decision
Evaluate structured requests against declarative policy outside application business logic.
When to consider it
- When authorization rules must be reviewed and applied consistently across applications or gateways
Considerations
- The decision point does not enforce the result; the caller must handle denial, failures, and policy/data freshness.
Connections
- In areaGovernance, Evaluation & Assurance
- Supports functionDecide whether an action is allowed
- Used byOpen Policy Agent (self-hosted)
Sources
Last reviewed 2026-10-03