---
title: "POST /v1/{+parent}/securityProfiles"
method: POST
path: "/v1/{+parent}/securityProfiles"
tags: ["organizations"]
---

# POST /v1/{+parent}/securityProfiles

`POST /v1/{+parent}/securityProfiles`

CreateSecurityProfile create a new custom security profile.

## Path parameters

- `parent` string, required

## Query parameters

- `securityProfileId` string

## Request body

- GoogleCloudApigeeV1SecurityProfile — Represents a SecurityProfile resource.
  - `displayName` string — DEPRECATED: DO NOT USE Display name of the security profile.
  - `revisionUpdateTime` string, google-datetime — Output only. The time when revision was updated.
  - `maxScore` integer — Output only. Maximum security score that can be generated by this profile.
  - `revisionCreateTime` string, google-datetime — Output only. The time when revision was created.
  - `description` string — Description of the security profile.
  - `revisionId` string, int64 — Output only. Revision ID of the security profile.
  - `environments` GoogleCloudApigeeV1SecurityProfileEnvironment[] — List of environments attached to security profile.
    - `environment` string — Output only. Name of the environment.
    - `attachTime` string, google-datetime — Output only. Time at which environment was attached to the security profile.
  - `name` string — Immutable. Name of the security profile resource. Format: organizations/{org}/securityProfiles/{profile}
  - `profileConfig` GoogleCloudApigeeV1ProfileConfig — ProfileConfig defines a set of categories and policies which will be used to compute security score.
    - `categories` GoogleCloudApigeeV1ProfileConfigCategory[] — List of categories of profile config.
      - `mtls` GoogleCloudApigeeV1ProfileConfigMTLS — Checks to see if you have configured mTLS for the target server.
      - `mediation` GoogleCloudApigeeV1ProfileConfigMediation — By default, following policies will be included: - OASValidation - SOAPMessageValidation
      - `abuse` GoogleCloudApigeeV1ProfileConfigAbuse — Checks for abuse, which includes any requests sent to the API for purposes other than what it is intended for, such as high volumes of requests, data scraping, and abuse related to authorization.
      - `cors` GoogleCloudApigeeV1ProfileConfigCORS — Checks to see if you have CORS policy in place.
      - `threat` GoogleCloudApigeeV1ProfileConfigThreat — By default, following policies will be included: - XMLThreatProtection - JSONThreatProtection
      - `authorization` GoogleCloudApigeeV1ProfileConfigAuthorization — By default, following policies will be included: - JWS - JWT - OAuth - BasicAuth - APIKey
  - `revisionPublishTime` string, google-datetime — Output only. DEPRECATED: DO NOT USE The time when revision was published. Once published, the security profile revision cannot be updated further and can be attached to environments.
  - `minScore` integer — Output only. Minimum security score that can be generated by this profile.
  - `scoringConfigs` GoogleCloudApigeeV1SecurityProfileScoringConfig[] — List of profile scoring configs in this revision.
    - `title` string — Title of the config.
    - `scorePath` string — Path of the component config used for scoring.
    - `description` string — Description of the config.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/apigee.md) · [All operations](https://skmtc.net/google/apis/apigee/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/apigee/versions/6e272fa448a7/schema)