Auto-sync: 2026-04-21 17:12
This commit is contained in:
@@ -1,23 +0,0 @@
|
||||
---
|
||||
title: "Policy-as-Code"
|
||||
type: concept
|
||||
tags: [Security, Compliance, DevOps]
|
||||
sources: [modern-itsm-driving-efficiency-security-resilience]
|
||||
last_updated: 2026-04-16
|
||||
---
|
||||
|
||||
## Summary
|
||||
Policy-as-Code(策略即代码)是将安全策略、合规规则定义为代码并通过自动化执行的实践。
|
||||
|
||||
## Definition
|
||||
Policy-as-Code 是将安全策略和合规规则编写为代码,存储在版本控制系统中,并通过自动化工具执行和验证的实践。支持审计自动化和持续合规。
|
||||
|
||||
## Key Attributes
|
||||
- **核心目的**:自动化安全策略执行、持续合规审计
|
||||
- **实现方式**:代码定义策略、自动化执行、持续验证
|
||||
- **工具**:OPA(Open Policy Agent)、Sentinel、Cloud Custodian
|
||||
|
||||
## Connections
|
||||
- [[DevSecOps]] ← 依赖 ← [[Policy-as-Code]]
|
||||
- [[ITSM]] ← 集成 ← [[Policy-as-Code]]
|
||||
- [[Zero Trust Architecture]] ← 实现 ← [[Policy-as-Code]]
|
||||
Reference in New Issue
Block a user