Update a security policy

To update a policy in the web interface:

1. Log in to NGINX Instance Manager.
2. From the Launchpad, select Instance Manager.
3. In the left menu, select WAF > Policies.
4. On the Security Policies page, select Edit from the Actions column for the policy you want to update.
5. The policy editor opens. Change the policy as described in Create a security policy.
6. After making your changes, select Save.

Editing a policy creates a new revision, whether or not you’ve deployed it.

To update a policy using the REST API, use POST with isNewRevision=true. Both the POST and PUT methods create a new policy revision. However, PUT is deprecated — use POST instead.

Example using POST (creates a new policy revision):

curl -X POST https://<NIM_FQDN>/api/platform/v1/security/policies?isNewRevision=true \
  -H "Authorization: Bearer <access token>" \
  -H "Content-Type: application/json" \
  -d @update-xss-policy.json

Example using PUT (creates a new policy revision, deprecated):

Deprecated

The PUT method is deprecated. Use POST with isNewRevision=true instead.

1. Get the policy UID:

   Copy

   curl -X GET https://<NIM_FQDN>/api/platform/v1/security/policies \
     -H "Authorization: Bearer <access token>"

2. Include the UID in your PUT request:

   Copy

   curl -X PUT https://<NIM_FQDN>/api/platform/v1/security/policies/{policy-uid} \
     -H "Authorization: Bearer <access token>" \
     -H "Content-Type: application/json" \
     -d @update-xss-policy.json

After updating the policy, you can publish it to selected instances or instance groups.