---
title: "Apply or update access policy"
method: POST
path: "/v1/cwobject/access-policy"
tags: ["CWObject"]
---

# Apply or update access policy

`POST /v1/cwobject/access-policy`

Creates or updates an access policy that defines who can access object storage and what actions they can perform.

## Request body

- EnsureAccessPolicyRequest — Inputs for creating or replacing an access policy by name.
  - `policy` CWObjectPolicy, required — A named access policy that grants or denies actions on resources for principals.
    - `version` string — The schema version for the access policy. Currently always `v1alpha1`.
    - `name` string — The unique policy name within the organization.
    - `statements` CWObjectPolicyStatement[] — An ordered list of statements that make up the policy. The first matching statement determines the result.
      - `name` string — A descriptive name for the statement, scoped to the policy.
      - `effect` string — Whether the statement allows or denies the listed actions on the listed resources for the listed principals. The server accepts exactly two values: `Allow` and `Deny`.
      - `actions` string[] — The actions the statement applies to. Accepts every S3 action (`s3:*`) and the CoreWeave-specific `cwobject:*` namespace. The canonical list lives in [the CoreWeave AI Object Storage actions reference](/products/storage/object-storage/auth-access/organization-policies/manage#allowed-ai-object-storage-api-actions) and the [IAM Access Policies](/security/iam/access-policies) documentation. `cwobject:*` actions must use `"*"` as the resource value.
      - `resources` string[] — The resources the statement applies to. Use `["*"]` to match every resource. `cwobject:*` actions must use `["*"]`.
      - `principals` string[] — The principals the statement applies to. Use `["*"]` to match every principal in the organization.

## Response `200`

OK

## Other responses

- `default` — Default error response

---

[API](https://skmtc.net/coreweave/apis/coreweave-telemetry-relay-api.md) · [All operations](https://skmtc.net/coreweave/apis/coreweave-telemetry-relay-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/coreweave/coreweave-telemetry-relay-api/versions/3b98ea4fe0c3/schema)