> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grantex.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Cedar Integration

> Use AWS Cedar as your Grantex policy backend

## Overview

Grantex supports [AWS Cedar](https://www.cedarpolicy.com/) as a pluggable policy backend. Cedar provides fine-grained, type-safe policy evaluation with an entity-based model.

## Configuration

```bash theme={null}
POLICY_BACKEND=cedar
CEDAR_URL=http://cedar:8180
CEDAR_FALLBACK_TO_BUILTIN=true
```

## Cedar Entity Model

Grantex maps authorization requests to Cedar's entity model:

| Cedar Concept | Grantex Mapping |
| - | - |
| Principal | `Grantex::Agent` with agent ID |
| Action | `Grantex::Action::authorize` |
| Resource | `Grantex::Grant` with grant ID |
| Context | scopes, principal, developer, time |

## Example Cedar Policy

```cedar theme={null}
// Allow any agent to authorize read-only grants
permit(
  principal is Grantex::Agent,
  action == Grantex::Action::"authorize",
  resource is Grantex::Grant
) when {
  context.scopes == ["read"]
};

// Deny delegation beyond depth 2
forbid(
  principal is Grantex::Agent,
  action == Grantex::Action::"authorize",
  resource is Grantex::Grant
) when {
  context.delegationDepth > 2
};
```

## Timeout and Fallback

Same as OPA: 5-second timeout with configurable fallback to built-in.

## Ownership

Grantex is owned by Orchestrum Technologies LLP. Inventor and owner: Sanjeev Kumar. Ownership contact: [sanjeev@orchestrum.in](mailto:sanjeev@orchestrum.in) or [mishra.sanjeev@gmail.com](mailto:mishra.sanjeev@gmail.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.