Cedar
What is Cedar ?
Basic Components
Policy
A policy is a statement that declares which principals are explicitly permitted/forbidden to perform an action on a resource.
The collection of policies together define the authorization rules for an application. A policy as as follow structure:
Policy can be created in two ways:
-
Static Policy: Standalone, complete policies that require no additional processing
-
Template-linked Policy: Policies created from a
policy templatethat has placeholders for the principal, resource, or both. The template is completed by replacing the placeholders with specific values.