API Policy Manager

The API Policy Manager allows you to configure custom API Gateway policies.

This feature helps you configure advanced policies on your Gateway to tailor how the Gateway executes APIs. The policy provides an extra logic layer that you can use to provide additional routing, validation, or data manipulation before runtime processes the request.

You can also configure policies via APIs; refer to Using Policies with Gateway APIs.

Supported policies

With the API Policy Manager, you can add the following policies to your APIs that you deployed on a Gateway.

• Assign Attributes Policy
• Assign Content Policy
• Cache Policy
• Circuit Breaker Policy
• Dynamic Routing Policy
• GraphQL Threat Protection Policy
• Groovy Policy
• HMAC Authentication Policy
• HTML to JSON Policy
• HTTP Callout Policy
• IP Filtering Policy
• JSON to JSON Policy
• JSON to XML Policy
• JSON Threat Protection Policy
• JSON Validation Policy
• Mock Policy
• Override HTTP Method Policy
• XML Threat Protection Policy
• XML to JSON Policy
• XML Validation Policy
• Regex Threat Protection Policy
• Request Content Limit Policy
• Request Validation Policy
• Resource Filtering Policy
• REST to SOAP Policy
• Role Based Access Control Policy
• Traffic Shadowing Policy
• Transform Headers Policy
• Transform Query Parameters Policy
• URL Rewriting Policy