Skip to main content
Feedback

Customizing security policies

You can add custom permissions to a security policy by using the Atom Security Policies object. Custom permissions are used to allow the runtime to access shared resources with your local infrastructure environment, such as an internal FTP server, database, web service endpoints or ports, or file system directories.

About this task

Configuring custom security policies by using the Atom Security Policies object ensures that you automatically receive the latest updates to the Boomi-managed security policies while still being able to add customized permissions as needed.

Customizations are applicable only for HIGH security policies, as LOW security policies have no restrictions.

caution

When updating, be sure to include the full set of custom permissions in the UPDATE request. Permissions omitted from the request will be removed.

The Atom Security Policies object allows you to configure custom policies for the individual JVM types (forked execution runner, execution worker, and connector operation browser), however it is most typical to configure the policies by using the common section that is applied to all three types.

For example, suppose you want to provide access to a local directory, my/Custom/Dir.

Procedure

  1. Use the GET operation of the Atom Security Policies object to retrieve any existing custom permissions.

  2. Use the UPDATE operation of the Atom Security Policies object to add or change custom permissions.

  3. Send an HTTP POST to https://api.boomi.com/api/rest/v1/accountId/AtomSecurityPolicies/containerId, where accountId is the ID of the authenticating account for the request, and containerId is the ID of the runtime cloud or runtime cluster for which you want to update the policy.

    POST https://api.boomi.com/api/rest/v1/ACCOUNT_ID/AtomSecurityPolicies/CONTAINER_ID

    <bns:AtomSecurityPolicies xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bns="http://api.platform.boomi.com/" atomId="CONTAINER_ID">
            <bns:common/>
                <bns:policies privilegeType="java.io.FilePermission">
                    <bns:arguments value="/my/Custom/Dir"/>
                    <bns:arguments value="read,write,delete"/>
                </bns:policies>
            </bns:common>
            <bns:runner/>
            <bns:worker/>
            <bns:browser/>
    </bns:AtomSecurityPolicies>

Additional resources

You can find more information about security policies and available customizations by using the following resources:

On this Page