<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Amazon Verified Permissions &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/amazon-verified-permissions/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Mon, 06 Jul 2026 16:52:23 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Enforce least-privilege authorization in multi-agent AI chains using Cedar</title>
		<link>https://noise.getoto.net/2026/07/06/enforce-least-privilege-authorization-in-multi-agent-ai-chains-using-cedar/</link>
		
		<dc:creator><![CDATA[Dhananjay Karanjkar]]></dc:creator>
		<pubDate>Mon, 06 Jul 2026 16:52:23 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[authorization]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Oauth]]></category>
		<category><![CDATA[OWASP]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=25fc05c50211a7178d1f6f5ba117b08e</guid>

					<description><![CDATA[If you’re building multi-agent AI systems, you need to prevent authorization scope from silently expanding as agents delegate tasks through multi-hop chains. Without proper controls, an agent can potentially act beyond what the originating user authorized, even when role-based access control (RBAC) policies are in place. The OWASP Top 10 for Agentic Applications classifies this […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Building secure B2C applications with fine-grained access control using Amazon Cognito and Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2026/06/05/building-secure-b2c-applications-with-fine-grained-access-control-using-amazon-cognito-and-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Sowmya Vemuri]]></dc:creator>
		<pubDate>Fri, 05 Jun 2026 17:07:06 +0000</pubDate>
				<category><![CDATA[Access Control]]></category>
		<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[fine-grained authorization]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=067b34436920334b62957c4dc43eb37f</guid>

					<description><![CDATA[Modern web applications require robust security controls to protect user data and application resources. Authentication and authorization are two fundamental pillars of application security that answer critical questions: Who are you? and What are you allowed to do? Implementing these controls correctly can be challenging for developers, especially when building data-intensive applications with frameworks like […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How Convera built fine-grained API authorization with Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2026/02/05/how-convera-built-fine-grained-api-authorization-with-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Santhosh Veeraraman]]></dc:creator>
		<pubDate>Thu, 05 Feb 2026 21:21:54 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Customer Solutions]]></category>
		<category><![CDATA[Experience-Based Acceleration]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=69fa00afd0e529ac4ff06d5b7ce9cb7f</guid>

					<description><![CDATA[In this post, we share how Convera used Amazon Verified Permissions to build a fine-grained authorization model for their API platform.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Migrating from Open Policy Agent to Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2025/11/05/migrating-from-open-policy-agent-to-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Samuel Folkes]]></dc:creator>
		<pubDate>Wed, 05 Nov 2025 18:50:51 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=64a3d1329fc857d155360b72997f6d74</guid>

					<description><![CDATA[Application authorization is a critical component of modern software systems, determining what actions users can perform on specific resources. Many organizations have adopted Open Policy Agent (OPA) with its Rego policy language to implement fine-grained authorization controls across their applications and infrastructure. While OPA has proven effective for policy-as-code implementations, organizations are increasingly looking for […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Empower AI agents with user context using Amazon Cognito</title>
		<link>https://noise.getoto.net/2025/06/18/empower-ai-agents-with-user-context-using-amazon-cognito/</link>
		
		<dc:creator><![CDATA[Abrom Douglas]]></dc:creator>
		<pubDate>Wed, 18 Jun 2025 16:33:38 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Bedrock]]></category>
		<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=4435d79d66b2a74f0c248688152dc8e5</guid>

					<description><![CDATA[Amazon Cognito is a managed customer identity and access management (CIAM) service that enables seamless user sign-up and sign-in for web and mobile applications. Through user pools, Amazon Cognito provides a user directory with strong authentication features, including passkeys, federation to external identity providers (IdPs), and OAuth 2.0 flows for secure machine-to-machine (M2M) authorization. Amazon […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Secure your Express application APIs in minutes with Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2025/06/17/secure-your-express-application-apis-in-minutes-with-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Trevor Schiavone]]></dc:creator>
		<pubDate>Tue, 17 Jun 2025 16:08:15 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[authorization]]></category>
		<category><![CDATA[Featured]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6c84ada385d66cd7723af38930bc2aa8</guid>

					<description><![CDATA[Today, Amazon Verified Permissions announced the release of @verifiedpermissions/authorization-clients-js, an open source package that developers can use to implement external fine-grained authorization for Express.js web application APIs in minutes when using Verified Permissions. Express is a minimal and flexible Node.js web application framework that provides a robust set of features for web and mobile applications. […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to support OpenID AuthZEN requests with Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2025/04/15/how-to-support-openid-authzen-requests-with-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Edward Sun]]></dc:creator>
		<pubDate>Tue, 15 Apr 2025 18:29:40 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=81b1f44e1e48b0d581f3234705d8967e</guid>

					<description><![CDATA[OpenID Foundation’s AuthZEN Working Group is currently drafting a new specification (version 1.0, draft 03 at the time of publication) and associated standard mechanisms, protocols, and formats to communicate authorization-related information between components involved in access control and authorization. Today, we’re publishing an open-source reference implementation demonstrating seamless integration between an AuthZEN-compliant policy enforcement point […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Manage authorization within a containerized workload using Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2025/03/13/manage-authorization-within-a-containerized-workload-using-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Manuel Heinkel]]></dc:creator>
		<pubDate>Thu, 13 Mar 2025 19:26:58 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon EKS]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Containers]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=b0a2c8cb9e48f2e8b26abb9761ec2d32</guid>

					<description><![CDATA[Containerization offers organizations significant benefits such as portability, scalability, and efficient resource utilization. However, managing access control and authorization for containerized workloads across diverse environments—from on-premises to multi-cloud setups—can be challenging. This blog post explores four architectural patterns that use Amazon Verified Permissions for application authorization in Kubernetes environments. Verified Permissions is a scalable permissions management and fine-grained […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Enhancing data privacy with layered authorization for Amazon Bedrock Agents</title>
		<link>https://noise.getoto.net/2024/10/02/enhancing-data-privacy-with-layered-authorization-for-amazon-bedrock-agents/</link>
		
		<dc:creator><![CDATA[Jeremy Ware]]></dc:creator>
		<pubDate>Wed, 02 Oct 2024 14:23:18 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Bedrock]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[authorization]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[generative AI]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=8038eee1b93f1d391d3f5ebb3a166d05</guid>

					<description><![CDATA[Customers are finding several advantages to using generative AI within their applications. However, using generative AI adds new considerations when reviewing the threat model of an application, whether you’re using it to improve the customer experience for operational efficiency, to generate more tailored or specific results, or for other reasons. Generative AI models are inherently […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to implement relationship-based access control with Amazon Verified Permissions and Amazon Neptune</title>
		<link>https://noise.getoto.net/2024/09/30/how-to-implement-relationship-based-access-control-with-amazon-verified-permissions-and-amazon-neptune/</link>
		
		<dc:creator><![CDATA[Henry Ho]]></dc:creator>
		<pubDate>Mon, 30 Sep 2024 18:00:17 +0000</pubDate>
				<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Amazon Neptune]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Customer Solutions]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=7ac398b6d262c7ab7a6710acee02ca38</guid>

					<description><![CDATA[Externalized authorization for custom applications is a security approach where access control decisions are managed outside of the application logic. Instead of embedding authorization rules within the application’s code, these rules are defined as policies, which are evaluated by a separate system to make an authorization decision. This separation enhances an application’s security posture by […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Authorize API Gateway APIs using Amazon Verified Permissions and Amazon Cognito</title>
		<link>https://noise.getoto.net/2024/04/24/authorize-api-gateway-apis-using-amazon-verified-permissions-and-amazon-cognito/</link>
		
		<dc:creator><![CDATA[Kevin Hakanson]]></dc:creator>
		<pubDate>Wed, 24 Apr 2024 18:02:43 +0000</pubDate>
				<category><![CDATA[Amazon API Gateway]]></category>
		<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=a9cdc4bb4463e7ffe85b3b1e5226f81b</guid>

					<description><![CDATA[Externalizing authorization logic for application APIs can yield multiple benefits for Amazon Web Services (AWS) customers. These benefits can include freeing up development teams to focus on application logic, simplifying application and resource access audits, and improving application security by using continual authorization. Amazon Verified Permissions is a scalable permissions management and fine-grained authorization service […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Using Amazon Verified Permissions to manage authorization for AWS IoT smart home applications</title>
		<link>https://noise.getoto.net/2024/04/23/using-amazon-verified-permissions-to-manage-authorization-for-aws-iot-smart-home-applications/</link>
		
		<dc:creator><![CDATA[Rajat Mathur]]></dc:creator>
		<pubDate>Tue, 23 Apr 2024 19:37:58 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[AWS IoT Core]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Internet of Things]]></category>
		<category><![CDATA[SaaS]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[serverless]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=fe2c2fa4be9f591ea7b85af92e4f8720</guid>

					<description><![CDATA[This blog post introduces how manufacturers and smart appliance consumers can use Amazon Verified Permissions to centrally manage permissions and fine-grained authorizations. Developers can offer more intuitive, user-friendly experiences by designing interfaces that align with user personas and multi-tenancy authorization strategies, which can lead to higher user satisfaction and adoption. Traditionally, implementing authorization logic using […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Use Amazon Verified Permissions for fine-grained authorization at scale</title>
		<link>https://noise.getoto.net/2024/03/26/use-amazon-verified-permissions-for-fine-grained-authorization-at-scale/</link>
		
		<dc:creator><![CDATA[Abhishek Panday]]></dc:creator>
		<pubDate>Tue, 26 Mar 2024 16:51:38 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6800ba40a11ddc672ea50485946b2174</guid>

					<description><![CDATA[Implementing user authentication and authorization for custom applications requires significant effort. For authentication, customers often use an external identity provider (IdP) such as Amazon Cognito. Yet, authorization logic is typically implemented in code. This code can be prone to errors, especially as permissions models become complex, and presents significant challenges when auditing permissions and deciding […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>AWS recognized as an Overall Leader in 2024 KuppingerCole Leadership Compass for Policy Based Access Management</title>
		<link>https://noise.getoto.net/2024/02/27/aws-recognized-as-an-overall-leader-in-2024-kuppingercole-leadership-compass-for-policy-based-access-management/</link>
		
		<dc:creator><![CDATA[Julian Lovelock]]></dc:creator>
		<pubDate>Tue, 27 Feb 2024 14:07:14 +0000</pubDate>
				<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[announcements]]></category>
		<category><![CDATA[authorization]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=f6209715ceea4cae2d24a331ce234988</guid>

					<description><![CDATA[Amazon Web Services (AWS) was recognized by KuppingerCole Analysts AG as an Overall Leader in the firm’s Leadership Compass report for Policy Based Access Management. The Leadership Compass report reveals Amazon Verified Permissions as an Overall Leader (as shown in Figure 1), a Product Leader for functional strength, and an Innovation Leader for open source […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>SaaS access control using Amazon Verified Permissions with a per-tenant policy store</title>
		<link>https://noise.getoto.net/2024/02/13/saas-access-control-using-amazon-verified-permissions-with-a-per-tenant-policy-store/</link>
		
		<dc:creator><![CDATA[Manuel Heinkel]]></dc:creator>
		<pubDate>Tue, 13 Feb 2024 17:26:52 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[ISV]]></category>
		<category><![CDATA[multitenancy]]></category>
		<category><![CDATA[SaaS]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<category><![CDATA[Tenant isolation]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=502e18d6239ca7cea7a96fdb239368d0</guid>

					<description><![CDATA[Access control is essential for multi-tenant software as a service (SaaS) applications. SaaS developers must manage permissions, fine-grained authorization, and isolation. In this post, we demonstrate how you can use Amazon Verified Permissions for access control in a multi-tenant document management SaaS application using a per-tenant policy store approach. We also describe how to enforce the […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to build a unified authorization layer for identity providers with Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2024/01/22/how-to-build-a-unified-authorization-layer-for-identity-providers-with-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Akash Kumar]]></dc:creator>
		<pubDate>Mon, 22 Jan 2024 21:02:09 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon API Gateway]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=fc101e3745caf009bbf7655ea20177b1</guid>

					<description><![CDATA[Enterprises often have an identity provider (IdP) for their employees and another for their customers. Using multiple IdPs allows you to apply different access controls and policies for employees and for customers. However, managing multiple identity systems can be complex. A unified authorization layer can ease administration by centralizing access policies for APIs regardless of […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Automate Cedar policy validation with AWS developer tools</title>
		<link>https://noise.getoto.net/2024/01/10/automate-cedar-policy-validation-with-aws-developer-tools/</link>
		
		<dc:creator><![CDATA[Pontus Palmenäs]]></dc:creator>
		<pubDate>Wed, 10 Jan 2024 17:08:18 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[AWS CodeBuild]]></category>
		<category><![CDATA[AWS CodePipeline]]></category>
		<category><![CDATA[DevSecOps]]></category>
		<category><![CDATA[open source]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=cf39ffbfc6140ea0c30aa7ff7451beb6</guid>

					<description><![CDATA[Cedar is an open-source language that you can use to authorize policies and make authorization decisions based on those policies. AWS security services including AWS Verified Access and Amazon Verified Permissions use Cedar to define policies. Cedar supports schema declaration for the structure of entity types in those policies and policy validation with that schema. […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Build an entitlement service for business applications using Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2023/11/06/build-an-entitlement-service-for-business-applications-using-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Abdul Qadir]]></dc:creator>
		<pubDate>Mon, 06 Nov 2023 14:15:28 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9735be0ac60035e944a99b79703c394e</guid>

					<description><![CDATA[Amazon Verified Permissions is designed to simplify the process of managing permissions within an application. In this blog post, we aim to help customers understand how this service can be applied to several business use cases. Companies typically use custom entitlement logic embedded in their business applications. This is the most common approach, and it […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Manage roles and entitlements with PBAC using Amazon Verified Permissions</title>
		<link>https://noise.getoto.net/2023/09/18/manage-roles-and-entitlements-with-pbac-using-amazon-verified-permissions/</link>
		
		<dc:creator><![CDATA[Abhishek Panday]]></dc:creator>
		<pubDate>Mon, 18 Sep 2023 20:25:16 +0000</pubDate>
				<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[AWS Amplify]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Permissions]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<category><![CDATA[Web app]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=93dbd2d9858b967c830a76859e341b32</guid>

					<description><![CDATA[Traditionally, customers have used role-based access control (RBAC) to manage entitlements within their applications. The application controls what users can do, based on the roles they are assigned. But, the drive for least privilege has led to an exponential growth in the number of roles. Customers can address this role explosion by moving authorization logic […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How we designed Cedar to be intuitive to use, fast, and safe</title>
		<link>https://noise.getoto.net/2023/08/21/how-we-designed-cedar-to-be-intuitive-to-use-fast-and-safe/</link>
		
		<dc:creator><![CDATA[Emina Torlak]]></dc:creator>
		<pubDate>Mon, 21 Aug 2023 20:33:10 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Verified Access]]></category>
		<category><![CDATA[Amazon Verified Permissions]]></category>
		<category><![CDATA[Automated reasoning]]></category>
		<category><![CDATA[open source]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=3b5e24e994ab575e445dc0643d6bb8d9</guid>

					<description><![CDATA[This post is a deep dive into the design of Cedar, an open source language for writing and evaluating authorization policies. Using Cedar, you can control access to your application’s resources in a modular and reusable way. You write Cedar policies that express your application’s permissions, and the application uses Cedar’s authorization engine to decide which […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 22/218 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-22 15:07:26 by W3 Total Cache
-->