[Policy as code] Technical design

[v1r7u]

Policy-as-code projects can help customers to define custom rules on their resources and have the potential to supersede specific scanners (like, polaris, azsk, etc).

We have to design how to integrate external policy-as-code solution to Joseki.

Potential policy-as-code solutions:

• https://github.com/open-policy-agent/opa
• https://www.inspec.io/
• https://azure.microsoft.com/en-us/services/azure-policy/

[v1r7u]

As the very first step, let's find out for what kind of scenarios it could be used