Fine-grained authorization for apps with Amazon Verified Permissions
summary
Amazon Verified Permissions offers a hosted authorization service using the Cedar policy language and a policy store model; 500 customers requested preview access and 90 were onboarded. Demo shows Cognito identities, JWT attributes, permit and when clauses for attribute-based and role-based rules, and live policy changes taking effect. Panasonic Avionics uses it for connected calls plus precomputed, cached decisions for disconnected aircraft use, syncing authorizations before flight. Integration options include API Gateway and identity providers; sample pet-store app and GitHub demos are available.
AI-written summary · about
chapters (19)
- 0:00Start
- 3:47How does Amazon Verified Permissions help?
- 7:11One size fits all
- 8:20Internal service access
- 10:19Customer facing
- 11:56Software vendor SaaS
- 15:14Implementation and deployment environments
- 16:12Current state of authorization management
- 19:38Companion application in connected mode
- 21:01Show movies-Simple default permission policy
- 25:03Authorization artifacts caching and syncing
- 27:35Authorization and enforcement events
- 28:22Summary
- 30:22Application developer
- 33:22Application-level policies
- 34:21Access administrator
- 34:58Compliance managers and auditors
- 54:09Launch Partners
- 58:13Sample pet store application
related talks
52mAccess management: Customer use of Cedar policy & Verified Permissions
59mProvably secure authorization
45mNext Generation Authorisation using Cedar
59mProving the correctness of AWS authorization
20mCedar: A New Language for Expressive, Fast, Safe, and Analyzable Authorization
58mImplementing Authorization in Web Applications and APIs
54mAuthorization for modern Applications
27mAuthorised is not a Yes/No question