Modify protections

put

https://{hostname}/appsec/v1/configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/protections

All products Update the security policy protections. This applies a set of protections that you can enable individually.

Path Params

configId

int64

required

A unique identifier for each configuration.

versionNumber

integer

required

A unique identifier for each version of a configuration.

policyId

string

required

A unique identifier for a security policy.

Query Params

accountSwitchKey

string

For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.

Body Params

These settings enable or disable each protection on your policy. However, you set the protections themselves in their corresponding operations available in this API.

applyApiConstraints

boolean

When enabled, this protection responds to triggers with a specified action.

applyApplicationLayerControls

boolean

When enabled, your security policy applies the Web Application Firewall controls to your traffic.

applyCpcControls

boolean

Defaults to false

When enabled, your security policy applies Client-Side Protection & Compliance controls to your match target.

applyMalwareControls

boolean

When enabled, your security policy applies file malware scanning controls to your traffic.

applyNetworkLayerControls

boolean

When enabled, your security policy applies the network layer control settings to your traffic.

applyRateControls

boolean

When enabled, your security policy applies the rate control settings to your traffic. Rate controls monitor and flag traffic too fast to be from a human.

applyReputationControls

boolean

When enabled, your security policy applies the reputation profile settings to your traffic. Reputation profile analyses IP addresses based on their prior interactions with Akamai customers, then alerts on or blocks potentially malicious IP addresses from issuing requests.

applySlowPostControls

boolean

When enabled, your security policy applies slow POST controls to your traffic.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

200Successfully updated the security policy protections.

400Invalid. Client error, such as invalid or malformed input.

403Forbidden. You don't have permission to write to this resource.

404Not found. The security policy doesn't exist, doesn't carry application layer controls, or no rule with this ID is available for use in this policy.

500Internal server error. Something went wrong on our side. Try again in a few minutes or contact support if the error persists.