Amazon Verified Permissions
Authorization for your apps
A fine-grained authorization service for your applications: write policies in the Cedar language, and your app calls an API to ask "is this user allowed to perform this action on this resource?"
- Cost$ Low
- Difficulty●●●●●
- Costs money when idle?No
- Serverless
Think of it asLike a legal department that quickly answers who is allowed to sign which documents.
When to use it
✓ Use it when
Your app needs complex authorization (RBAC/ABAC) decoupled from code.
✗ Avoid it when
Authorizing access to AWS resources → IAM; just need sign-in → Cognito.
Common uses
- Multi-tenant authorization in SaaS
- Permission checks in an API Gateway authorizer
- Manage document sharing permissions
What does it cost?
- Pricing model: Charged by the number of authorization requests and policy management calls.
