Cedarling is an embeddable policy decision point (PDP) that brings Cedar authorization into an application process. It validates JSON Web Tokens (JWTs), maps claims into Cedar entities, and evaluates policies through Cedarling::authorize, avoiding dependence on a remote authorization service. section 9.8
Its supporting functions make it useful when authorization must stay close to the application:
- Maps JWT claims directly into Cedar entities for systems that already issue JWTs. section 9.8
- Provides logging, policy store management, workload identity registration, and enterprise-infrastructure communication. section 9.8
- Uses an in-memory key–value store with automatic record expiration to support evaluations below 100 milliseconds. section 9.8
- Requires application teams to manage configuration and entity mapping, and remains an early-stage project under active development. section 9.8
