Cedar
An authorization policy language open-sourced by AWS that emphasizes analyzability and formal verification. It supports policy expression along four dimensions—principal, action, resource, and context—and can express fine-grained authorization rules with conditions.
Timeline (last 90 days)
Cedar is AWS's open-source authorization language, emphasizing analyzability and formal verification.
Both OPA and Cedar support expressing policies along the four dimensions of principal, action, resource, and context.
Externalized policy enforcement is often implemented using policy engines such as OPA (Open Policy Agent) or Cedar, and Agents must first query the policy engine for an allow decision before initiating a tool call.
Anthropic disclosed that hackers used credential-stealing trojans such as Cedar and Amos to steal Claude login credentials and misappropriate users' drawing and API quotas.
All Facts (4)
策略即代码领域的代表性工具包括HashiCorp的Sentinel、Open Policy Agent（OPA）以及AWS的Cedar
85%UnverifiedCedar is AWS's open-source authorization language, emphasizing analyzability and formal verification.
50%UnverifiedBoth OPA and Cedar support expressing policies along the four dimensions of principal, action, resource, and context.
50%UnverifiedExternalized policy enforcement is often implemented using policy engines such as OPA (Open Policy Agent) or Cedar, and Agents must first query the policy engine for an allow decision before initiating a tool call.
50%