Help Center/ Workspace/ API Reference/ Workspace APIs/ Policy Group/ Updating a Specified Access Policy
Updated on 2026-02-10 GMT+08:00

Updating a Specified Access Policy

Function

Updates a specified access policy.

Debugging

You can debug this API through automatic authentication in API Explorer or use the SDK sample code generated by API Explorer.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

  • If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
  • If you are using identity policy-based authorization, the following identity policy-based permissions are required.

    Action

    Access Level

    Resource Type (*: required)

    Condition Key

    Alias

    Dependencies

    workspace:accessPolicies:update

    Write

    -

    -

    -

    • elb:ipgroups:delete
    • elb:ipgroups:create
    • elb:ipgroups:update

URI

PUT /v2/{project_id}/access-policy/{access_policy_id}

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

project_id

Yes

String

Project ID.

access_policy_id

Yes

String

Access policy ID.

Request Parameters

Table 2 Request body parameters

Parameter

Mandatory

Type

Description

operation_type

No

String

Operation type.

  • ADD_IP: adding an IP address

  • DELETE_IP: deleting an IP address

ip_white_list

No

Array of IpInfo objects

IP addresses of a policy.

is_enable

No

Boolean

Whether the IP address whitelist takes effect.

is_block_all

No

Boolean

Whether the IP address whitelist prohibits access from all IP addresses.

Table 3 IpInfo

Parameter

Mandatory

Type

Description

ip_address

Yes

String

IP address.

subnet_mask

Yes

String

Subnet mask.

Response Parameters

Status code: 200

Normal.

Status code: 400

Table 4 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 401

Table 5 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 403

Table 6 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 404

Table 7 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 405

Table 8 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 500

Table 9 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 503

Table 10 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

encoded_authorization_message

String

Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Example Requests

put /v2/0e973a948e8091232f25c00673f168b7/access-policy/20b726affecc4411bcdc49a66e3e8f63

{
  "ip_white_list" : [ {
    "ip_address" : "192.xxx.xxx.xxx",
    "subnet_mask" : "255.xxx.xxx.xxx"
  }, {
    "ip_address" : "192.xxx.xxx.xxx",
    "subnet_mask" : "255.xxx.xxx.xxx"
  } ]
}

Example Responses

None

Status Codes

Status Code

Description

200

Normal.

400

The request cannot be understood by the server due to malformed syntax.

401

Authentication failed.

403

No operation permissions.

404

No resources found.

405

The method specified in the request is not allowed.

500

An internal service error occurred. For details about the error code, see the error code description.

503

Service unavailable.

Error Codes

See Error Codes.