AWS verifiedpermissions documentation change
Summary
Added new FAQ section explaining Cedar 2 deprecation error message and migration requirements
Security assessment
The change documents end-of-life for Cedar 2 and migration guidance without indicating any security vulnerability. It's a standard deprecation notice with no evidence of patching vulnerabilities or addressing exploits.
Diff
diff --git a/verifiedpermissions/latest/userguide/cedar4-faq.md b/verifiedpermissions/latest/userguide/cedar4-faq.md index 77255bfc0..25a1cf26b 100644 --- a//verifiedpermissions/latest/userguide/cedar4-faq.md +++ b//verifiedpermissions/latest/userguide/cedar4-faq.md @@ -7 +7 @@ -Why are some policies, policy templates and schemas not compatible with Cedar 4?How do I tell whether my policy store is using Cedar 2 or Cedar 4?How do I upgrade to Cedar 4?Can I downgrade my policy store from Cedar 4 to Cedar 2?Why am I receiving an error message saying my policy store is configured for Cedar 2?How do I make my schema compatible with Cedar 4?How do I make my policies and templates compatible with Cedar 4? +Why do I receive an error saying Cedar 2 is no longer supported when I call Amazon Verified Permissions?Why are some policies, policy templates and schemas not compatible with Cedar 4?How do I tell whether my policy store is using Cedar 2 or Cedar 4?How do I upgrade to Cedar 4?Can I downgrade my policy store from Cedar 4 to Cedar 2?Why am I receiving an error message saying my policy store is configured for Cedar 2?How do I make my schema compatible with Cedar 4?How do I make my policies and templates compatible with Cedar 4? @@ -16,0 +17,2 @@ Amazon Verified Permissions is automatically upgrading policy stores to Cedar 4. + * Why do I receive an error saying Cedar 2 is no longer supported when I call Amazon Verified Permissions? + @@ -33,0 +36,9 @@ Amazon Verified Permissions is automatically upgrading policy stores to Cedar 4. +## Why do I receive an error saying Cedar 2 is no longer supported when I call Amazon Verified Permissions? + +Beginning April 2026, authorization APIs (`IsAuthorized`, `BatchIsAuthorized`, `IsAuthorizedWithToken` and `BatchIsAuthorizedWithToken`) are being disabled for policy stores which use Cedar 2. In this case, the following error message is returned: + + + Your policy store uses Cedar 2.x, which is no longer supported. See https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/cedar4-faq.html or contact AWS Support for more information. + +If you encounter this error message when calling Verified Permissions, it means that your policy store is incompatible with Cedar 4, and so was unable to be migrated to the new version. To continue using Amazon Verified Permissions, create a new policy store, which will use Cedar 4, or contact Support. +