---
title: "Create a new Custom Access List associated with a Shield Zone"
method: POST
path: "/shield/shield-zone/{shieldZoneId}/access-lists"
tags: ["Access Lists"]
---

# Create a new Custom Access List associated with a Shield Zone

`POST /shield/shield-zone/{shieldZoneId}/access-lists`

## Path parameters

- `shieldZoneId` integer, required — The ID of the Shield Zone to which the Custom Access List will be associated.

## Request body

- CreateCustomAccessListRequest — Request model for creating a new custom access list.
  - `name` string, nullable, required — The display name for the new access list.
  - `description` string, nullable — Optional description of the access list's purpose or contents.
  - `type` 0 | 1 | 2 | 3 | 4 | 5, required — 0 = IP 1 = CIDR 2 = ASN 3 = Country 4 = Organization 5 = JA4
  - `content` string, nullable, required — The initial content for the access list with entries separated by newlines.
  - `checksum` string, nullable — SHA-256 checksum of the content for integrity verification. If null, it will be automatically calculated.

## Response `200`

OK

- CustomAccessListResponse — Response containing custom access list data or error information.
  - `data` CustomAccessList — Represents a custom access list associated with a shield zone.
    - `id` integer, required — The unique identifier of the custom access list.
    - `name` string, nullable — The display name of the custom access list.
    - `description` string, nullable — Optional description of the access list's purpose or contents.
    - `type` 0 | 1 | 2 | 3 | 4 | 5 — 0 = IP 1 = CIDR 2 = ASN 3 = Country 4 = Organization 5 = JA4
    - `content` string, nullable — The raw content of the access list with entries separated by newlines.
    - `checksum` string, nullable — SHA-256 checksum of the content for integrity verification.
    - `entryCount` integer, nullable — The total number of entries in the access list.
    - `lastModified` string, date-time, nullable — The timestamp when the access list was last modified.
  - `error` GenericRequestResponse — Generic response object containing status information for API operations.
    - `statusCode` 100 | 101 | 102 | 103 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 226 | 300 | 301 | 302 | 303 | 304 | 305 | 306 | 307 | 308 | 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 421 | 422 | 423 | 424 | 426 | 428 | 429 | 431 | 451 | 500 | 501 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 — 100 = Continue 101 = SwitchingProtocols 102 = Processing 103 = EarlyHints 200 = OK 201 = Created 202 = Accepted 203 = NonAuthoritativeInformation 204 = NoContent 205 = ResetContent 206 = PartialContent 207 = MultiStatus 208 = AlreadyReported 226 = IMUsed 300 = MultipleChoices 300 = Ambiguous 301 = MovedPermanently 301 = Moved 302 = Found 302 = Redirect 303 = SeeOther 303 = RedirectMethod 304 = NotModified 305 = UseProxy 306 = Unused 307 = TemporaryRedirect 307 = RedirectKeepVerb 308 = PermanentRedirect 400 = BadRequest 401 = Unauthorized 402 = PaymentRequired 403 = Forbidden 404 = NotFound 405 = MethodNotAllowed 406 = NotAcceptable 407 = ProxyAuthenticationRequired 408 = RequestTimeout 409 = Conflict 410 = Gone 411 = LengthRequired 412 = PreconditionFailed 413 = RequestEntityTooLarge 414 = RequestUriTooLong 415 = UnsupportedMediaType 416 = RequestedRangeNotSatisfiable 417 = ExpectationFailed 421 = MisdirectedRequest 422 = UnprocessableEntity 422 = UnprocessableContent 423 = Locked 424 = FailedDependency 426 = UpgradeRequired 428 = PreconditionRequired 429 = TooManyRequests 431 = RequestHeaderFieldsTooLarge 451 = UnavailableForLegalReasons 500 = InternalServerError 501 = NotImplemented 502 = BadGateway 503 = ServiceUnavailable 504 = GatewayTimeout 505 = HttpVersionNotSupported 506 = VariantAlsoNegotiates 507 = InsufficientStorage 508 = LoopDetected 510 = NotExtended 511 = NetworkAuthenticationRequired
    - `success` boolean — Indicates whether the operation was successful.
    - `message` string, nullable — Human-readable message describing the result of the operation.
    - `errorKey` string, nullable — Unique error key for programmatic error handling, if applicable.

## Other responses

- `202` — Accepted
- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

---

[API](https://skmtc.net/bunny/apis/bunny-net-cdn-logging.md) · [All operations](https://skmtc.net/bunny/apis/bunny-net-cdn-logging/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bunny/bunny-net-cdn-logging/revisions/9e622620664b/schema)