cedar-policy/cedar

Health v2 · maintenance only

Adoption not part of the score

1693 stars · 170 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Cedar is a purpose-built policy language and Rust implementation for writing and enforcing fine-grained authorization policies in applications. It includes an authorization engine, schema validator, symbolic compiler for policy verification, CLI, language server, and WASM bindings.

Use cases

• enforce fine-grained permissions in my application
• implement RBAC or ABAC authorization
• validate authorization policies against a schema
• verify my security policies are correct with automated reasoning
• evaluate access requests with low bounded latency
• embed an authorization engine in a Rust service

When to choose

• you need policies decoupled from application code that can be independently audited
• you want fast, scalable real-time authorization with bounded latency
• you need formal verification or analysis of your authorization model
• you want a battle-tested policy engine backed by AWS with Rust, CLI, and WASM interfaces

When to avoid

• you only need simple role checks that a few database flags can handle
• your stack cannot integrate with Rust or WASM and you need a pure managed service
• you need a general-purpose rules engine beyond authorization

Facets

library · maturity stable

authorization security parser interpreter cli wasm security developer-tools apis backend rust wasm cli cross-platform policy-language rbac abac policy-engine formal-verification language-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cedar-policy/cedar")