Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ User Guide/ Permissions/ Identity Policies Management/ Identity Policy Versions
Updated on 2026-07-24 GMT+08:00
View PDF
Share

Identity Policy Versions

The system retains multiple versions of each identity policy. Policy versioning allows you to retrieve and restore earlier versions of an identity policy, quickly recover data in the event of accidental changes, and trace policy modification history during audits.

By default, editing an identity policy automatically generates a new version, sequentially numbered starting from v1. System-defined identity policy versions can only be viewed and cannot be modified. While you cannot delete any version of a system-defined policy, you can delete only non-default versions of custom identity policies.

Only the content of custom identity policies can be modified. The content of system-defined identity policies cannot be modified. A maximum of five versions of a custom identity policy can be retained.

Figure 1 Identity policy versions

Viewing Identity Policy Versions

  1. Log in to the new IAM console.
  2. Choose Identity Policies in the navigation pane.
  3. Click the name of the target identity policy. On the identity policy details page, click the Policy Versions tab.

    Figure 2 Viewing identity policy versions

Modifying an Identity Policy based on an Identity Policy Version

  1. Log in to the new IAM console.
  2. Choose Identity Policies in the navigation pane.
  3. Click the name of the target identity policy. On the identity policy details page, click the Policy Versions tab.

    Figure 3 Viewing identity policy versions

  4. Click next to an identity policy version, view the content, and copy it.
  5. On the identity policy details page, click the Policy Content tab.
  6. Click Edit, select the JSON view, and paste the identity policy content.

    Figure 4 Modifying an identity policy

  7. Click OK.

    Check the content of the identity policy to verify that the modifications are applied.

Setting the Default Policy Version

  1. Log in to the new IAM console.
  2. Choose Identity Policies in the navigation pane.
  3. Click the name of the target identity policy. On the identity policy details page, click the Policy Versions tab.
  4. Select a non-default version and click Set as Default.

    Figure 5 Setting the default policy version

  5. Click OK.

    Verify that the modified version has a default mark after its name in the list of the Policy Versions tab.