AWS Verified Permissions

Overview

Amazon Verified Permissions is a managed, fine-grained authorization service for custom applications, built on the open-source Cedar policy language. It lets developers define and evaluate permission policies outside application code.

What it is good at

It brings policy-based access control (PBAC and ReBAC-style patterns) as a managed AWS service: define who can do what on which resource in Cedar, evaluate at runtime, and keep authorization logic centralized and auditable. Cedar is open source and analyzable, and the service fits naturally into AWS-native and Amazon Cognito applications.

Where it falls short

It is AWS-centric and centered on Cedar, so teams wanting a cloud-neutral engine or a broad policy tooling ecosystem may prefer independent options like OpenFGA, Cerbos, or OPA.

Pricing

Transparent, usage-based pricing per authorization request.

Best for, and who should look elsewhere

Choose it for managed, Cedar-based authorization in AWS applications. Look elsewhere for a cloud-neutral or ecosystem-rich engine (see Cerbos or OpenFGA).

Bottom line

A managed Cedar authorization service, strong for AWS-native applications wanting externalized, fine-grained access control.