UpdateSecurityPolicy

Updates a security policy.

Use this method to:

• Rename a security policy
• Change enforcement rules
• Update auditing behavior

Examples

• Update security policy:

  Promotes one executable rule from audit to block while leaving unmatched executables allowed. Updating an assigned policy validates materializability; updating an unassigned policy only stores its spec.

  securityPolicyId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
  spec:
    executables:
      defaultEffect: EFFECT_ALLOW
      rules:
        - path: "npx"
          effect: EFFECT_BLOCK
        - path: "/usr/bin/curl"
          effect: EFFECT_BLOCK