Update a security policy

To update a policy in the web interface:

1. In your browser, go to the FQDN for your NGINX Instance Manager host and log in.
2. From the Launchpad, select Instance Manager.
3. In the left menu, select WAF > Policies.
4. On the Security Policies page, select Edit from the Actions column for the policy you want to update.
5. The editor opens, allowing you to modify the policy as described in Create a security policy.
6. After making your changes, select Save.

To update a policy using the REST API, send either a POST or PUT request to the Security Policies endpoint.

• Use POST with the isNewRevision=true parameter to create a new revision of an existing policy.
• Use PUT with the policy UID to overwrite the existing version.

Example using POST (create new revision):

curl -X POST https://{{NIM_FQDN}}/api/platform/v1/security/policies?isNewRevision=true \
  -H "Authorization: Bearer <access token>" \
  -H "Content-Type: application/json" \
  -d @update-xss-policy.json

Example using PUT (overwrite existing):

1. Retrieve the policy’s unique identifier (UID):

   Copy

   curl -X GET https://{{NIM_FQDN}}/api/platform/v1/security/policies \
     -H "Authorization: Bearer <access token>"

2. Include the UID in your PUT request:

   Copy

   curl -X PUT https://{{NIM_FQDN}}/api/platform/v1/security/policies/<policy-uid> \
     -H "Authorization: Bearer <access token>" \
     -H "Content-Type: application/json" \
     -d @update-xss-policy.json

After updating the policy, you can publish it to selected instances or instance groups.