AWS's Dogwood has extended the Cedar policy language with rules for approvals, ordering, and running limits.