Amazon Verified Permissions
#106 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”Amazon Verified Permissions is a service for managing authorization (who can do what) inside your own app. Instead of writing permission rules in code, they are kept as policies in a separate policy store. Policies are written in an open source policy language called Cedar. Before doing an action, the app asks Verified Permissions, and it checks the policies and allows or denies it. IAM controls permissions in AWS, while Verified Permissions controls the permissions of your app’s users.
Simple example
Section titled “Simple example”An office rule book — which file staff in which position can see or change, all written in one book.
Why it’s needed
Section titled “Why it’s needed”When permission rules are scattered inside code, changing and testing them is hard.
Where it’s used
Section titled “Where it’s used”“Only a manager can approve leave”, “only the owner can delete a document” — rules inside an app.
Azure equivalent
Section titled “Azure equivalent”No direct match
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: