IAM policies are yet another example of something that started as a "simple" declarative specification, then people realized it wasn't actually simple and started tacking on poorly thought out language constructs until it became a new awful embedded turing complete language.<p>Rather than make a new language, they should have made a WASM or eBPF API and just let people use the full power of whatever language they want.<p>> Cedar is written in Rust, which makes it run in milliseconds<p>This statement is so weird. Milliseconds isn't particularly fast, and does that mean it runs in that time span regardless of complexity?