Sign in

v22

latestOpenAPI 3.0.0raw.githubusercontent.com2026-07-01140308542.4 KB
PolicySetVersions

Activate a policy set version

Set active=true to bind this version as the active zone policy set.

patch/zones/{zone_id}/policy-sets/{policy_set_id}/versions/{version_id}

Path parameters

zone_idstring required

The zone identifier

policy_set_idstring required

The policy set identifier

version_idstring required

The policy version identifier

Headers

X-API-Versionstring

API version header (date-based, e.g. 2026-02-01)

X-Client-Request-IDstring uuid

Unique request identifier specified by the originating caller and passed along by proxies.

Request body

activetrue required

Must be true. Binds this version as the active zone policy set.

Response

The policy set version, now active

idstring required
policy_set_idstring required
versioninteger required
schema_versionstring required

Schema version pinned to this policy set version. Determines the Cedar schema used for evaluation when activated.

manifest_shastring required

Hex-encoded SHA-256 of the canonicalized manifest

activeboolean

Whether this policy set version is currently bound with mode='active'

archived_atstring date-time nullable
archived_bystring nullable
created_atstring date-time required
created_bystring required
owner_type'platform' | 'customer' required

Who manages this policy set version:

  • "platform" — managed by the Keycard platform (system policy set versions).
  • "customer" — managed by the tenant (custom policy set versions).