Amazon Web Services

In this AWS re:Inforce 2024 session, Lucas Wagner and Sean McLaughlin discuss how AWS used automated reasoning to prove the correctness of their new authorization engine. They explain the process of building, proving, and validating the engine, which handles one billion API calls per second. The speakers detail how they used the Dafny programming language to create specifications and proofs, and how they validated the new engine against quadrillions of production authorizations. The talk highlights the benefits of this approach, including a 65% performance improvement and increased confidence in making future changes. The session concludes by introducing Cedar, a proven-correct authorization language, and Amazon Verified Permissions, which customers can use for their own applications.

product-information
skills-and-how-to
security-marketing-priority
security-identity-compliance
security-tech
Show 4 more

Up Next

VideoThumbnail
47:39

Simplifying Application Authorization: Amazon Verified Permissions at AWS re:Invent 2023

Nov 22, 2024
VideoThumbnail
2:53:33

Streamlining Patch Management: AWS Systems Manager's Comprehensive Solution for Multi-Account and Multi-Region Patching Operations

Nov 22, 2024
VideoThumbnail
9:30

Deploying ASP.NET Core 6 Applications on AWS Elastic Beanstalk Linux: A Step-by-Step Guide for .NET Developers

Nov 22, 2024
VideoThumbnail
1:01:07

Accelerate ML Model Delivery: Implementing End-to-End MLOps Solutions with Amazon SageMaker

Nov 22, 2024
VideoThumbnail
6:45

Grindr's Next-Gen Chat System: Leveraging AWS for Massive Scale and Security

Nov 22, 2024