The safeguards map / 3.5 Policy engines
Cedar
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A policy language and authorization engine that evaluates Cedar policies against a request and returns allow or deny.
Where it sits
3.5 Policy engines (primary): Evaluates Cedar policies against a request made of a principal, action, resource and context, and returns allow or deny to the application that asked.
Cedar is a language for writing authorization policies and making authorization decisions based on those policies.
captured
Given an authorization request, Cedar’s authorizer returns Allow if the request is granted or Deny if it is rejected, along with some diagnostics.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
Handoffs
consumes Policy: Cedar policies
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.