Sign in

v22

latestOpenAPI 3.0.0raw.githubusercontent.com2026-07-01140308542.4 KB
PolicySetVersions

Create a new immutable policy set version

Validates the manifest, computes SHA, and creates an immutable version snapshot.

post/zones/{zone_id}/policy-sets/{policy_set_id}/versions

Path parameters

zone_idstring required

The zone identifier

policy_set_idstring required

The policy set identifier

Headers

X-API-Versionstring

API version header (date-based, e.g. 2026-02-01)

X-Client-Request-IDstring uuid

Unique request identifier specified by the originating caller and passed along by proxies.

Request body

schema_versionstring required

Schema version to pin to this policy set version.

Response

The newly created policy set version

idstring required
policy_set_idstring required
versioninteger required
schema_versionstring required

Schema version pinned to this policy set version. Determines the Cedar schema used for evaluation when activated.

manifest_shastring required

Hex-encoded SHA-256 of the canonicalized manifest

activeboolean

Whether this policy set version is currently bound with mode='active'

archived_atstring date-time nullable
archived_bystring nullable
created_atstring date-time required
created_bystring required
owner_type'platform' | 'customer' required

Who manages this policy set version:

  • "platform" — managed by the Keycard platform (system policy set versions).
  • "customer" — managed by the tenant (custom policy set versions).