specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: Open Policy Agent
providerId: open-policy-agent
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Policies
  - Standards
  - FinOps
  - FOCUS
  - Open Source
notes: OPA is open-source software with no licensing fees. FinOps shape here describes the cost of running
  OPA (compute, observability) rather than a vendor invoice. Commercial alternatives (Styra DAS) would
  produce a vendor-billed surface modeled separately.
description: 'FOCUS-aligned FinOps for self-hosted Open Policy Agent: there is no software licensing line
  item; cost is dominated by underlying compute, memory, and decision-log storage in the operator''s own
  infrastructure.'
sources:
  - https://www.openpolicyagent.org/
  - https://github.com/open-policy-agent/opa
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: Open Policy Agent (CNCF)
serviceCategory: Identity / Authorization
billingModel:
  pricingCategory: Self-Hosted Open Source
  billingFrequency: N/A
  billingCurrency: USD
  chargeCategories:
    - Usage
focusColumns:
  ServiceName: Open Policy Agent
  ServiceCategory: Identity / Authorization
  ProviderName: Open Policy Agent
  PublisherName: Open Policy Agent (CNCF)
  InvoiceIssuerName: N/A (open source)
  BillingCurrency: USD
meters:
  - name: compute_hours
    unit: instance-hour
    aggregation: sum
    dimensions:
      - cluster
      - environment
  - name: decision_log_volume
    unit: GB
    aggregation: sum
    dimensions:
      - cluster
      - sink
  - name: policy_evaluations
    unit: request
    aggregation: sum
    dimensions:
      - policy
      - cluster
principles:
  - name: Visibility
    description: Capture decision logs and Prometheus metrics from each OPA instance to attribute query
      load and latency by policy and cluster.
  - name: Allocation
    description: Tag the underlying compute (Kubernetes namespaces, nodes) running OPA so that infrastructure
      cost can be attributed to the policies it serves.
  - name: Optimization
    description: Right-size OPA replicas, enable bundle caching, and consolidate policies to reduce CPU
      and decision-log egress.
  - name: Accountability
    description: Platform / security teams typically own the OPA deployment; ensure decision-log storage
      and OPA compute appear in their cost reviews.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com