What query language does KICS support for custom queries?

KICS, which stands for Keeping Infrastructure as Code Secure, utilizes OPA Rego as its query language for custom queries. Rego is a high-level declarative language that allows you to define policies to support decision-making processes. It is specifically designed to work with Open Policy Agent (OPA), enabling users to write queries that can evaluate infrastructure as code configurations against set security requirements and best practices.

Using OPA Rego, users have the flexibility to express complex policies and conditions typically required for validating configurations, making it highly suitable for security checks in cloud environments. As a result, practitioners using KICS can leverage this powerful language to enhance the security of their applications and infrastructure efficiently.

While other languages like SQL and YAML are commonly associated with data queries and configurations, respectively, they do not provide the specific capabilities and flexibility that OPA Rego offers for policy definition and evaluation within the context of KICS. JSON, although a data format often used in conjunction with programming languages, is not designed for the same purpose as OPA Rego in KICS.