Amazon Web Services
In this AWS re:Invent 2023 session, Eric Brandwine and Neha Rungta discuss the evolution of authorization solutions and the importance of choosing the right building blocks for scalable, secure applications. They introduce Cedar, an open-source authorization language, and Amazon Verified Permissions (AVP), a managed service built on Cedar. The speakers emphasize the challenges of implementing robust authorization systems and how Cedar and AVP can simplify this process for developers. They provide insights into the design principles behind Cedar, its security features, and how it compares to AWS Identity and Access Management (IAM). The presentation includes practical examples of Cedar policies and demonstrates how AVP can be integrated into both new and existing applications to enhance security and streamline authorization management.