Access management: Customer use of Cedar policy & Verified Permissions
summary
Cedar is an open policy language that claims 60x faster than Rego in benchmarks, with a formally verified reference and millions of test cases behind it; Amazon Verified Permissions hosts Cedar policies and returns decisions in 25–40 ms per AVP call (with API Gateway authorizers using caching so about 70% cached in one deployment). StrongDM embeds a Go Cedar engine to authorize at wire speed (microseconds) and applies policy side effects like column redaction and row limiting; the OIDC integration lets AVP consume external tokens.
AI-written summary · about
chapters (9)
- 0:00Introduction to access management
- 1:42What is authorization
- 4:17Introducing Cedar policy language
- 10:27Justin’s experience with Cedar
- 26:27Amazon Verified Permissions overview
- 28:58Simply Business use case
- 42:32Getting started with Verified Permissions
- 45:21Demo with external OIDC provider
- 50:00Recap and closing
related talks
20mCedar: A New Language for Expressive, Fast, Safe, and Analyzable Authorization
45mNext Generation Authorisation using Cedar
59mFine-grained authorization for apps with Amazon Verified Permissions
30mSecuring Data With Cedar
43mBuilding Authorization with Node.js: Dos and Don’ts
43mApplication Code of Conduct - Full-Stack Policy as Code
51mPermissions: Centralized or Decentralized? Both!
41mJourneys to Zero Trust on AWS