IAM policies are yet another example of something that started as a "simple" declarative specification, then people realized it wasn't actually simple and started tacking on poorly thought out language constructs until it became a new awful embedded turing complete language.
Rather than make a new language, they should have made a WASM or eBPF API and just let people use the full power of whatever language they want.
> Cedar is written in Rust, which makes it run in milliseconds
This statement is so weird. Milliseconds isn't particularly fast, and does that mean it runs in that time span regardless of complexity?
Rather than make a new language, they should have made a WASM or eBPF API and just let people use the full power of whatever language they want.
> Cedar is written in Rust, which makes it run in milliseconds
This statement is so weird. Milliseconds isn't particularly fast, and does that mean it runs in that time span regardless of complexity?