v1

latestOpenAPI 3.0.3FortiCNAPP Use License2026-08-041754351.1 MB

Policies

Update Policies

Update an existing LQL policy registered in your FortiCNAPP instance by specifying parameters in the request body when invoking the following endpoint:

PATCH https://YourAccount.lacework.net/api/v2/Policies/{policyId}

Replace {policyId} with the policyId value returned for an LQL policy in the response when the GET /api/v2/Policies endpoint is invoked.

patch/api/v2/Policies/{policyId}

Path parameters

policyIdstring required

Policy ID

Headers

Authorizationstring required

Bearer Access Token. For example, "Bearer {YourAPIToken}"

Content-Typestring required

application/json

Request body

policyType'Violation'

The policy type such as Violation.

queryIdstring

Identifier of the query that executes while running the policy.

titlestring

The policy's title.

enabledboolean

When sending a request, use this attribute to enable or disable a policy. When included in a response, returns True for enabled policies, or returns False for disabled policies.

descriptionstring

Information about the new policy.

remediationstring

Remediation strategy for the events triggered by the policy.

severity'info' | 'low' | 'medium' | 'high' | 'critical'

The severity of an event triggered by the policy.

limitnumber

The maximum number of records that each policy will return. The default value is 1000.

evalFrequency'Hourly' | 'Daily'

Frequency at which the policy will be evaluated

alertEnabledboolean

When sending a request, set to True if you want to send alerts to an alert profile when the policy is triggered. Set to False if you want to mute alerts when the policy is triggered.

alertProfilestring

The alert profile to use for sending alerts when the policy is triggered.

tagsstring[]

A list of policy tags.

Response

No Error