DEV Community

Discussion on: Everything You Need to Know About the Difference Between OPA's Rego and AWS Cedar

Collapse
 
gemanor profile image
Gabriel L. Manor

Thanks for the question, Dean.
Handling errors in Policy as Code happened in two phases, validation and audit.
For validation of your policy, both OPA and Cedar provide tools for linting and validation. There's +1 for Cedar, as they allow you to validate your data entities with the policy code you've created.
For auditing, both OPA and Cedar have nice audit logs out of the box that could help you audit. For more advanced auditing, handling, and just-in-time updates, you could use OPAL github.com/permitio/opal. If you are looking for even better error handling then you can use Permit.io which provides rich error-handling interfaces and alerting mechanism, you can read more on Permit.io's audit logs approach here permit.io/blog/audit-logs