---
title: "POST /v1/{+parent}/resourcePolicies"
method: POST
path: "/v1/{+parent}/resourcePolicies"
tags: ["projects"]
---

# POST /v1/{+parent}/resourcePolicies

`POST /v1/{+parent}/resourcePolicies`

Creates the specified ResourcePolicy configuration.

## Path parameters

- `parent` string, required

## Request body

- GoogleFirebaseAppcheckV1ResourcePolicy — App Check enforcement policy for a specific resource of a Google service supported by App Check. Note that this policy will override the service-level configuration.
  - `enforcementMode` 'OFF' | 'UNENFORCED' | 'ENFORCED' — Required. The App Check enforcement mode for this resource. This will override the App Check overall EnforcementMode setting on the service.
  - `name` string — Required. Identifier. The relative name of the resource policy object, in the format: ``` projects/{project_number}/services/{service_id}/resourcePolicies/{resource_policy_id} ``` Note that the `service_id` element must be a supported service ID. Currently, the following service IDs are supported: * `oauth2.googleapis.com` (Google Identity for iOS) `resource_policy_id` is a system-generated UID.
  - `updateTime` string, google-datetime — Output only. Timestamp when this resource policy configuration object was most recently updated.
  - `targetResource` string — Required. Service specific name of the resource object to which this policy applies, in the format: * **iOS OAuth clients** (Google Identity for iOS): `//oauth2.googleapis.com/projects/{project_number}/oauthClients/{oauth_client_id}` Note that the resource must belong to the service specified in the `name` and be from the same project as this policy, but the resource is allowed to be missing at the time of creation of this policy; in that case, we make a best-effort attempt at respecting this policy, but it may not have any effect until the resource is fully created.
  - `etag` string — This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. This etag is strongly validated as defined by RFC 7232.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/firebaseappcheck.md) · [All operations](https://skmtc.net/google/apis/firebaseappcheck/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/firebaseappcheck/versions/b321501ef5a5/schema)