In this episode of ChatLoopBackOff, CNCF Ambassador Henrik Rexed explores Cedar for the first time. Cedar is an open-source authorization policy language designed to decouple access control from application logic.

Core Capabilities:

Decoupled Security: Separates authorization logic from code, enabling updates without redeployment.

Flexible Models: Supports Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control models.

Mathematical Rigor: Formally verified language specification using theorem provers to ensure precise evaluation.

High Performance: Designed for real-time evaluation with bounded latency in cloud-native workloads.

Henrik will provide a hands-on look at how Cedar functions, offering an honest, first-time assessment of its syntax and tools.