Updated on 2025-11-07 GMT+08:00

Identity Policy Versions

The system retains multiple versions for each identity policy. In the event of any unexpected operation, you can quickly restore the identity policy.

Upon creation, an identity policy has the version identified as v1. When any changes are made to the policy, the policy version is incremented by 1. The system-defined identity policy of each version can only be viewed, but cannot be modified or deleted. You can delete non-default versions of custom identity policies, but not system-defined identity policies.

Only the content of custom identity policies can be modified. The content of system-defined identity policies cannot be modified. A maximum of five versions of a custom identity policy can be retained.

Viewing Identity Policy Versions

  1. Log in to the new IAM console.
  2. Choose Identity Policies in the navigation pane.
  3. Click the name of the target identity policy. On the identity policy details page, click the Policy Versions tab.

    Figure 1 Viewing identity policy versions

Modifying an Identity Policy based on an Identity Policy Version

  1. Log in to the new IAM console.
  2. Choose Identity Policies in the navigation pane.
  3. Click the name of the target identity policy. On the identity policy details page, click the Policy Versions tab.

    Figure 2 Viewing identity policy versions

  4. Click next to an identity policy version, view the content, and copy it.
  5. On the identity policy details page, click the Policy Content tab.
  6. Click Edit, select the JSON view, and paste the identity policy content.

    Figure 3 Modifying an identity policy

  7. Click OK.