Julian Lovelock

Your identity provider handles authentication, but how do you design the authorization model that follows? In this chalk talk, learn how to use OIDC token claims from providers, including Amazon Cognito, with a Cedar-based authorization model.

Authentication and authorization are foundational to protecting access to application APIs and data. AWS has heard from customers that developing and operating an integrated solution could be streamlined.

Permissions in your application can be based on several factors, including principal’s roles and attributes, resource data, and other contextual information such as method of authentication. By using policy-based permissions, you can decouple authorization logic from your applications, gain better visibility and auditability into access rules, and manage permissions at scale.