3 docs tagged with "decision-logs"

API keys are service identities that let OPA/EOPA instances and automation report decision logs and status to EnforceAuth. They are scoped to an entity and carry explicit permission scopes.

EnforceAuth ingests OPA decision logs so security and compliance teams can answer why was this denied? without SSH and grep across clusters.

A Policy Decision Point (PDP) runs OPA or Enterprise OPA and evaluates Rego. EnforceAuth is the control plane: it builds bundles from Git, publishes them to your bundle destination, and ingests decision logs for audit and coverage.