Help Center> Organizations> API Reference> API> Managing Policies> Creating a Policy

Updated on 2024-03-15 GMT+08:00

View PDF

Creating a Policy

Function

This API is used to create a policy of the specified type. It can be called only from the organization's management account.

URI

POST /v1/organizations/policies

Request Parameters

**Table 1** Request header parameters
Parameter	Mandatory	Type	Description
X-Security-Token	No	String	Security token (session token) of your temporary security credentials. If a temporary security credential is used, this header is required. Minimum: 1
X-Language	No	String	Language of the returned results. Enumeration values: zh-cn en-us

**Table 2** Request body parameters
Parameter	Mandatory	Type	Description
content	Yes	String	Policy text content to be added to the new policy. Minimum: 0 Maximum: 20000
description	Yes	String	Optional description to be assigned to the policy. Minimum: 0 Maximum: 512
name	Yes	String	Name to be assigned to the policy. Minimum: 1 Maximum: 64
type	Yes	String	Type of the policy to be created. It can be service_control_policy or tag_policy. Enumeration values: service_control_policy tag_policy
tags	No	Array of TagDto objects	List of tags you want to attach to the new policy. Array Length: 0 - 20

**Table 3** TagDto
Parameter	Mandatory	Type	Description
key	Yes	String	Identifier or name of the tag key. Minimum: 1 Maximum: 128
value	Yes	String	String value associated with the tag key. You can set the tag value to an empty string, but cannot set it to NULL. Minimum: 0 Maximum: 255

Response Parameters

Status code: 201

**Table 4** Response body parameters
Parameter	Type	Description
policy	PolicyDto object	Details about a policy.

**Table 5** PolicyDto
Parameter	Type	Description
content	String	Text content of the policy. Minimum: 0 Maximum: 20000
policy_summary	PolicySummaryDto object	Information about a policy (policy content not included).

**Table 6** PolicySummaryDto
Parameter	Type	Description
is_builtin	Boolean	A boolean value indicating whether the specified policy is a system policy. If the value is true, the policy is a system policy. You can attach the policy to roots, OUs, or accounts, but you cannot edit it.
description	String	Description of the policy. Maximum: 512
id	String	Unique ID of the policy. Minimum: 1 Maximum: 130
urn	String	Uniform resource name of the policy. Minimum: 1 Maximum: 1500
name	String	Name of the policy. Minimum: 1 Maximum: 64
type	String	Policy type. It can be service_control_policy or tag_policy. Minimum: 1 Maximum: 64

Example Requests

Creating a policy

POST https://{hostname}/v1/organizations/policies

{
  "content" : "{\"Version\":\"5.0\",\"Statement\":[{\"Sid\":\"Statement1\",\"Effect\":\"Allow\",\"Action\":[\"*\"],\"Resource\":[\"*\"]}]}",
  "description" : "auto0923160642938XHxSPolicydesc",
  "name" : "auto092316064293806EYPolicyName",
  "type" : "service_control_policy",
  "tags" : [ {
    "key" : "keystring",
    "value" : "valuestring"
  } ]
}

Example Responses

Status code: 201

Successful.

{
  "policy" : {
    "content" : "{\"Version\":\"5.0\",\"Statement\":[{\"Sid\":\"Statement1\",\"Effect\":\"Allow\",\"Action\":[\"*\"],\"Resource\":[\"*\"]}]}",
    "policy_summary" : {
      "is_builtin" : false,
      "description" : "auto0923160642938XHxSPolicydesc",
      "id" : "p-b4wpejd02o66g0pvfinvsatp4t9krfum",
      "urn" : "organizations::0a6d25d23900d45c0faac010e0fb4de0:policy:o-fhkmi6mek7wlqdp6nideqhb47qwtjdsv/service_control_policy/p-b4wpejd02o66g0pvfinvsatp4t9krfum",
      "name" : "auto092316064293806EYPolicyName",
      "type" : "service_control_policy"
    }
  }
}