cedar-awesome

Write policies and evaluate authorization requests in the browser, no install required. :office:

Discussion with Ricardo Sueiras and Julian Lovelock

Includes a discussion of Cedar and a demo.

The session that introduced Verified Permissions and Cedar.

Discussion with Spencer Erickson and Liana Hadarean

Deep dive on the Kubernetes integration.

A long-form reference covering the language and the managed service.

Managed AWS service for storing Cedar policies and evaluating authorization requests at scale. :moneybag:

Linux Foundation Janssen Project governed embeddable PDP powered by the Cedar Rust engine. Offers 10 language

OpenID

Official Rust crate for running a local decision point with file-backed policy and entity providers that reload on change. :office:

REST API server for Cedar Policy authorization, designed for internal infrastructure. It provides a multi-tenant authorization service.

Policy and data administration, distribution, and real-time updates on top of Policy Agents.

Custom ASP.NET Core authorization policy provider backed by Verified Permissions. :office:

Reference implementation connecting the OpenID AuthZEN protocol to Amazon Verified Permissions. :office:

Official examples, including the TinyTodo tutorial application. :office:

Tutorials and learning path for the Cedarling PDP :zap:

Worked example of migrating from role-based to policy-based authorization. :office:

Official Express middleware that enforces Cedar policies on HTTP routes. :office:

TypeScript authorization primitives for building Cedar-backed enforcement points. :office:

Official exploration of Cedar for authorizing AI agents and their tool calls. :office:

Authorize and admit Kubernetes API requests with Cedar policies. :office:

Native Go implementation of Cedar, with no CGO or WASM required. :office:

Java bindings for the Cedar engine. :office:

by Phil Windley - The book uses Cedar to explain the concepts of authorization and also as a practical implementation. Great book to get started with authorization in general.

Symbolic compiler that translates policies to SMT, so you can prove equivalence, subsumption, disjointness and never-errors properties. The analysis itself is verified in Lean. :office:

Official command-line tool to validate, format, translate and evaluate Cedar policies. :office:

Official formatter library for Cedar policy source. :office: