InlineAppPolicyUpdateConfig1

JSON Example

{
    "action_type": "POLICY_UPDATE",
    "policy_path": "/infra/domains/default/security-policies/Policy-123",
    "connectivity_preference": "ALLOWLIST",
    "app_connectivity_strategies": [
        {
            "strategy": "ALLOW_INTRA",
            "logging": false
        },
        {
            "strategy": "DROP_EGRESS",
            "logging": true
        }
    ]
}

string

policy_path

Required

NSX intent path of the security policy to update.

string

connectivity_preference

Optional

Default connectivity rule for the security policy. When omitted, the default rule is removed.

Notes:

This is a full replacement - the existing default rule is overwritten or removed.

Value	Description
`ALLOWLIST`	Creates or updates to a default drop rule.
`DENYLIST`	Creates or updates to a default allow rule.
`ALLOWLIST_ENABLE_LOGGING`	Allowlist mode with logging enabled.
`DENYLIST_ENABLE_LOGGING`	Denylist mode with logging enabled.
`NONE`	Removes the default rule.

Enumeration: ALLOWLIST, DENYLIST, ALLOWLIST_ENABLE_LOGGING, DENYLIST_ENABLE_LOGGING, NONE

array of ApplicationConnectivityStrategy

app_connectivity_strategies

Optional

Per-application connectivity strategies for the security policy. This list replaces all existing strategies. When omitted or empty, all existing strategies are removed.

Used By

AppPolicyUpdateConfig