Cedar is an open source policy language and evaluation engine. Cedar enables developers to express fine-grained permissions as easy-to-understand policies enforced in their applications, and decouple access control from application logic. Cedar supports common authorization models such as role-based access control and attribute-based access control. It is the first policy language built from the ground up to be verified formally by using automated reasoning, and tested rigorously using differential random testing.
- Project Website
- Documentation
- Need help? Try Slack
- cedar Cedar SDK including the authorization engine, validator, policy formatter, and CLI
- cedar-docs Houses documentation for all cedar projects
- cedar-examples Example applications using the Cedar language and SDK
- cedar-spec Formal Lean specification for the Cedar language as well as the differential testing/property-based testing framework
- cedar-local-agent Configurable cache for Cedar policies and entities
- cedar-go Cedar Go implementation
- cedar-java Java language bindings for Cedar
- cedar-awesome Curated list of awesome Cedar related tools and articles.
- rfcs Request For Comments (RFC) for Cedar
- vscode-cedar Cedar policy language extension for Visual Studio Code
- cedar-integration-tests Cedar integration tests
- highlightjs-cedar highlight.js support for Cedar policy language
- prism-cedar Prism support for Cedar policy language
- cedar-for-agents Code and software at the intersection of Cedar and agents.
This project follows the CNCF Code of Conduct. For more information see the Code of Conduct FAQ, or contact conduct@cncf.io with any additional questions or comments.
If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.
This project is licensed under the Apache v2.0 License.
See NOTICE for details.
Cedar is a trademark of The Linux Foundation. If publishing software using Cedar, you are not required to attribute. However, if you’d like to, we encourage you to use the language below.
| Do: | Don't: |
|---|---|
| ✅ Powered by Cedar | ❌ Cedar 2.0 |
| ✅ Created with Cedar | ❌ Created by Cedar |
| ✅ Using Cedar | ❌ Software created by Cedar |
