Cedar

A language for defining permissions as policies, which describe who should have access to what, and a specification for evaluating those policies.