About This Architecture
Fine-grained API authorization architecture using Amazon Verified Permissions for policy-based access control, inspired by Convera's implementation. Features API Gateway with Lambda authorizer, Cognito for identity, DynamoDB for policy context, and CloudWatch for authorization audit logging. Fork this diagram on Diagrams.so to customize the Cedar policy model and add your specific microservice endpoints. Source: https://aws.amazon.com/blogs/architecture/