
Cedar Has a Free API: Amazon's Authorization Language That Makes Access Control Readable and Mathematically Provable
Your app grew from 3 users to 30,000. What started as a simple admin/user role check is now a 400-line jungle of nested if-statements. Your security team can't audit it. Your product manager can't understand it. Amazon built Cedar because they had the same problem — at AWS scale. What Cedar Actually Does Cedar is an open-source policy language and evaluation engine created by Amazon for fine-grained authorization. It powers Amazon Verified Permissions and internal AWS services. Cedar policies look almost like plain English: "A User can view a Photo if they are in the Photo's viewer list." The Cedar engine evaluates policies in microseconds and provides formal verification tools to prove your policies are correct before you ship. The SDK is available in Rust, Java, Python, JavaScript/TypeScript, Go, and C. Fully open source (Apache 2.0). Amazon Verified Permissions (AVP) provides a hosted version with 1 million free authorization requests/month for 12 months. Quick Start Using the Cedar
Continue reading on Dev.to Webdev
Opens in a new tab



