Core Authorization Components
Reva integrates all essential policy management points:| Component | Role | Function |
|---|---|---|
| PAP (Policy Administration Point) | Policy Designer | Create, manage, and govern access policies |
| PIP (Policy Information Point) | Data Hub | Integrate user/resource data for decision-making |
| PDP (Policy Decision Point) | Decision Engine | Evaluate access requests using Cedar policies |
| PEP (Policy Enforcement Point) | Enforcement Layer | Apply decisions within your applications |
What is Reva?
Reva is an AI-powered platform that combines three essential authorization components:- Policy Designer (PAP)
Create, manage, and govern access policies - Data Hub (PIP)
Integrate user/resource data for authorization decisions - Decision Engine (PDP)
Evaluate access requests using Cedar policy language
Reva works seamlessly with Amazon Verified Permissions (AVP) and includes its own Cedar-based decision engine.
AI Use Cases
Reva integrates AI to enhance policy governance and authorization:- AI-Driven Policy Creation: Automatically generate policies from plain English descriptions, improving the efficiency of policy creation.
- AI-Based Schema Generation: Leverage AI to generate and manage schemas based on the application’s data model, streamlining schema setup and maintenance.
- Access Search: Use AI to search and analyze access data across multiple systems, helping identify potential risks and unauthorized access patterns.
Built for Everyone
Whether you’re a developer, security architect, or business user, Reva helps you:- Design policies with no-code tools or AI-assisted editor.
- Model RBAC, ABAC, and ReBAC access controls.
- Generate policies from plain English descriptions.
- Test authorization scenarios before deployment.
- Visualize access rules with our Access Graph.
How Reva Enhances Your Ecosystem
Reva supercharges your application authorization by providing:- Central policy management (PAP)
Manage policies in one place for easier governance and consistency. - Simplified data integration (PIP)
Integrate data from multiple sources to make real-time authorization decisions. - Local decision capability (PDP)
Evaluate access requests locally, ensuring quick and accurate decisions. - Access Graph visualization showing why access decisions happen
Visualize access rules, making it easier to understand who has access to what and why. - AI-Driven Policy Creation
Automatically generate policies from plain English descriptions, improving policy creation efficiency. - AI-Based Schema Generation
Leverage AI to generate and manage schemas based on the application’s data model, streamlining schema setup and maintenance. - AI-Enhanced Access Search
Use AI to analyze access data, helping identify unauthorized access patterns or risks across your ecosystem. - Library
The Reva Library is a centralized repository for reusable policies, schemas, and entity definitions, enabling teams to share, search, and quickly use pre-built components to accelerate policy creation. - Guardrail
Guardrail is a policy governance enforcement framework that helps standardize policies and detect violations for better governance across systems.
What You’ll Learn
By the end of this guide, you will:- Understand Reva’s Core Architecture: Gain a clear picture of how Reva’s components—like Policy Designer (PAP), Data Hub (PIP), and Decision Engine (PDP)—work together to enforce access control in your applications.
- Explore Key Concepts: Learn foundational ideas such as Policy Stores, Environments, Schemas, and Guardrails that power Reva’s governance framework.
- Onboard Applications and Data: Discover how to connect your applications and data sources to Reva and set up authorization-ready environments.
- Design and Manage Authorization Policies: Get hands-on with Reva’s intuitive interface to define, test, and activate fine-grained access policies using Cedar.
- Leverage Policy Governance Workflows: Learn how Reva supports policy reviews, approvals, version tracking, and violation detection to ensure enterprise-grade compliance.
- Enable Integrations for Continuous Access Management: Understand how to integrate Reva with platforms like Amazon Verified Permissions, GitHub, and GitLab for policy lifecycle automation.
- Use AI to Accelerate Access Control: See how Reva’s AI features assist in policy generation, schema building, and access analysis.