Then the cloud multiplied.
An AWS role here. An Azure subscription there. A GCP project spun up by another team. Each with its own permissions model, secrets, and gates. Managing identity and access across them stopped being hard. It started being dangerous.
Multi-cloud access management is no longer an edge case. It’s the normal state of engineering for companies that move fast. Every extra platform means more IAM policies, more audit trails, more potential gaps. Without a unifying control layer, policy drift becomes inevitable.
Open Policy Agent (OPA) is the clear path to restoring control. OPA decouples policy from infrastructure, giving you one place to define and enforce rules across multiple cloud providers. Instead of learning three different languages for IAM, you write once and apply everywhere. The Rego policy language makes intent explicit. Policies become versioned, tested, and repeatable.
With OPA, you can define rules for least privilege, enforce role-based access, and run compliance checks before deployment. It integrates at the API layer, in CI/CD pipelines, Kubernetes clusters, service meshes, and even custom apps. For multi-cloud, this means AWS, GCP, and Azure resources follow the same logic. Whether the request comes from a Lambda function or a VM in Compute Engine, it hits the same policy brain before being allowed.
Scaling OPA for multi-cloud requires strong policy organization. Tag rules by resource type, cloud provider, or compliance standard. Use policy bundles to push updates to all enforcement points at once. Make audit logs a first-class citizen—OPA can explain every decision it makes, which turns compliance reviews from painful to instant.
The payoff is a single source of truth for access control. One policy layer. One audit history. No more silent divergence between clouds. Security tightens. Engineering moves faster because rules are automated and consistent.
You can spend months wiring this together, or you can see it working today. Hoop.dev takes OPA-powered multi-cloud access management from theory to reality in minutes. Run your first unified policy and watch every cloud obey the same rules without rewriting permission sets.
Start now. The more clouds you have, the more you need one brain to manage them. With OPA and hoop.dev, that brain is already built.