Nicholaos Mouzourakis, Staff Product Security Engineer at Gusto, explains how they implemented auditable decision logging for Open Policy Agent (OPA) in their Kubernetes environment. He describes how Styra's Declarative Authorization Service (DAS) ingests and indexes OPA decision logs from all instances, making them searchable in a centralized location.

Nicholaos details how DAS enables:

- Searching for actions taken by specific users
- Identifying users with access to particular resources
- Tracking when and how access was granted
- Simulating policy changes against historical decision logs

He also mentions how they overcame challenges with legacy batch decision logs that weren't easily searchable by implementing a new batch API provided by Styra.

Watch the full episode: https://kube.fmhttps://ku.bz/S-2vQ_j-4