Cedar is an open source policy language and evaluation engine. Cedar enables developers to express fine-grained permissions as easy-to-understand policies enforced in their applications, and decouple access control from application logic. Cedar supports common authorization models such as role-based access control and attribute-based access control. It is the first policy language built from the ground up to be verified formally by using automated reasoning, and tested rigorously using differential random testing.
- Project Website
- Documentation
- Need help? Try Slack
The cedar repository houses the Cedar SDK including the authorization engine, validator, policy formatter, and CLI.
- cedar-docs (https://github.com/cedar-policy/cedar-docs)
The cedar-docs repository houses documentation for all cedar projects.
- cedar-examples (https://github.com/cedar-policy/cedar-examples)
The cedar-examples repository houses example applications using the Cedar language and SDK
- cedar-java (https://github.com/cedar-policy/cedar-java)
The cedar-java repository houses the Java language bindings for Cedar.
- cedar-spec (https://github.com/cedar-policy/cedar-spec)
The cedar-spec repository houses the formal Dafny specification for the Cedar language as well as the differential testing/property-based testing framework.
- cedar-awesome (https://github.com/cedar-policy/cedar-awesome)
The cedar-awesome repository houses a curated list of awesome Cedar related tools and articles.
The rfcs repository houses the Request For Comments (RFC) for Cedar.
- vscode-cedar (https://github.com/cedar-policy/vscode-cedar)
The vscode-cedar repository houses the Cedar policy language extension for Visual Studio Code.
This project has adopted the Amazon Open Source Code of Conduct. For more information see the Code of Conduct FAQ, or contact [email protected] with any additional questions or comments.
If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page or directly via email to [email protected]. Please do not create a public GitHub issue.
This project is licensed under the Apache v2.0 License.
See NOTICE for details.
Cedar is a registered trademark of Amazon Web Services. If publishing software using Cedar, you are not required to attribute. However, if you’d like to, we encourage you to use the language below.
| Do: | Don't: |
|---|---|
| ✅ Powered by Cedar | ❌ Cedar 2.0 |
| ✅ Created with Cedar | ❌ Created by Cedar |
| ✅ Using Cedar | ❌ Software created by Cedar |