AWS has announced that Amazon API Gateway requests can now be authorized with Amazon Verified Permissions. This runtime authorization engine allows fine-grained authorization models to be built and evaluated in real-time. By leveraging AWS Cognito tokens and the Lambda Authorizer, users can enhance access control. Alternative approaches for access control include OpenFGA and Permit.io's Policy Decision Point.
Share this post