Learn to transform application access control from role-based access control (RBAC) to policy-based access control (PBAC) using Amazon Verified Permissions (AVP) and Cedar policy language in this 44-minute conference session from AWS re:Inforce 2025. Discover how the drive for least privilege has led to role explosion in RBAC models and understand why shifting towards PBAC by augmenting RBAC with attribute-based access control (ABAC) is essential for modern applications. Explore techniques for moving authorization logic out of application code and implementing a centralized PBAC model that provides more granular and scalable access control. Master the process of defining permissions as policies using Cedar and learn strategies for seamlessly migrating from RBAC to PBAC with minimal changes to existing application logic, enabling organizations to achieve better security posture while maintaining operational efficiency.