cedar-policy

README.md

Welcome!

Cedar is an open source policy language and evaluation engine. Cedar enables developers to express fine-grained permissions as easy-to-understand policies enforced in their applications, and decouple access control from application logic. Cedar supports common authorization models such as role-based access control and attribute-based access control. It is the first policy language built from the ground up to be verified formally by using automated reasoning, and tested rigorously using differential random testing.

Project Resources

• Project Website
• Documentation
• Need help? Try Slack

Repositories

• cedar
  Cedar SDK including the authorization engine, validator, policy formatter, and CLI
• cedar-docs
  Houses documentation for all cedar projects
• cedar-examples
  Example applications using the Cedar language and SDK
• cedar-spec
  Formal Lean specification for the Cedar language as well as the differential testing/property-based testing framework
• cedar-local-agent
  Configurable cache for Cedar policies and entities
• cedar-go
  Cedar Go implementation
• cedar-java
  Java language bindings for Cedar
• cedar-awesome
  Curated list of awesome Cedar related tools and articles.
• rfcs
  Request For Comments (RFC) for Cedar
• vscode-cedar
  Cedar policy language extension for Visual Studio Code
• cedar-integration-tests
  Cedar integration tests
• highlightjs-cedar
  highlight.js support for Cedar policy language
• prism-cedar
  Prism support for Cedar policy language

Code of Conduct

This project follows the CNCF Code of Conduct. For more information see the Code of Conduct FAQ, or contact conduct@cncf.io with any additional questions or comments.

Security

If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

License

This project is licensed under the Apache v2.0 License.

Copyright

See NOTICE for details.

Trademark

Cedar is a trademark of Amazon Web Services. If publishing software using Cedar, you are not required to attribute. However, if you’d like to, we encourage you to use the language below.