---
title: "CreatePolicy"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

Path: EZGH Cloud organizations and IAM › policies

`POST /v1/organizations/{orgId}/policies`

## Authentication

Requires one of the following:

- `apiKey`, http, header `Authorization`
- `sessionCookie`, apiKey, in cookie
- `oauth`, http, header `Authorization`

## Path parameters

- `CreatePolicy.path.orgId` (string, required)

## Header parameters

- `CreatePolicy.header.idempotency-key` (string, optional)

## Request body

_Required._

- `CreatePolicy.name` (string, required)
- `CreatePolicy.document` (object, required)
  - `CreatePolicy.document.statements` (array<object>, required)
    - `CreatePolicy.document.statements.effect` (string, required)
      - one of `"allow"`, `"deny"`
    - `CreatePolicy.document.statements.actions` (array<string>, required)
    - `CreatePolicy.document.statements.resources` (array<string>, required)
      - maxLength 1024
    - `CreatePolicy.document.statements.sid` (string, optional)
      - maxLength 64
- `CreatePolicy.description` (string, optional)

## Example request

```json
{
  "name": "string",
  "description": "string",
  "document": {
    "statements": [
      {
        "sid": "string",
        "effect": "allow",
        "actions": [
          "string"
        ],
        "resources": [
          "string"
        ]
      }
    ]
  }
}
```

## Code samples

### cURL

```curl
curl --request POST \
  --url https://orgs.ezghcloud.com/v1/organizations/string/policies \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "string",
  "description": "string",
  "document": {
    "statements": [
      {
        "sid": "string",
        "effect": "allow",
        "actions": [
          "string"
        ],
        "resources": [
          "string"
        ]
      }
    ]
  }
}
'
```

### TypeScript

```typescript
const url = 'https://orgs.ezghcloud.com/v1/organizations/string/policies';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json', Authorization: 'Bearer <token>'},
  body: JSON.stringify({
    name: 'string',
    description: 'string',
    document: {
      statements: [{sid: 'string', effect: 'allow', actions: ['string'], resources: ['string']}]
    }
  })
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));
```

### Python

```python
import requests

url = "https://orgs.ezghcloud.com/v1/organizations/string/policies"

payload = {
    "name": "string",
    "description": "string",
    "document": { "statements": [
            {
                "sid": "string",
                "effect": "allow",
                "actions": ["string"],
                "resources": ["string"]
            }
        ] }
}
headers = {
    "Content-Type": "application/json",
    "Authorization": "Bearer <token>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)
```

## Responses

### 201

Success

#### Example

```json
{
  "id": "string",
  "type": "managed",
  "name": "string",
  "slug": "string",
  "resourceName": "string",
  "description": "string",
  "document": {
    "statements": [
      {
        "sid": "string",
        "effect": "allow",
        "actions": [
          "string"
        ],
        "resources": [
          "string"
        ]
      }
    ]
  },
  "status": "active",
  "attachments": 0,
  "createdAt": "string",
  "updatedAt": "string"
}
```

- `CreatePolicy.response.201.id` (string, required)
- `CreatePolicy.response.201.type` (string, required)
  - one of `"managed"`, `"custom"`
- `CreatePolicy.response.201.name` (string, required)
- `CreatePolicy.response.201.slug` (any of, required)
  - any of: `string`, `null`
- `CreatePolicy.response.201.resourceName` (any of, required)
  - any of: `string`, `null`
- `CreatePolicy.response.201.description` (string, required)
- `CreatePolicy.response.201.document` (object, required)
  - `CreatePolicy.response.201.document.statements` (array<object>, required)
    - `CreatePolicy.response.201.document.statements.effect` (string, required)
      - one of `"allow"`, `"deny"`
    - `CreatePolicy.response.201.document.statements.actions` (array<string>, required)
    - `CreatePolicy.response.201.document.statements.resources` (array<string>, required)
    - `CreatePolicy.response.201.document.statements.sid` (string, optional)
- `CreatePolicy.response.201.status` (string, required)
  - one of `"active"`, `"deprecated"`
- `CreatePolicy.response.201.attachments` (any of, required)
  - any of: `number`, `string`
- `CreatePolicy.response.201.createdAt` (any of, required)
  - any of: `string`, `null`
- `CreatePolicy.response.201.updatedAt` (any of, required)
  - any of: `string`, `null`

### 400

InvalidRequest

#### Example

```json
{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "issues": [
      {
        "path": "string",
        "message": "string"
      }
    ]
  }
}
```

- `CreatePolicy.response.400.error` (object, required)
  - `CreatePolicy.response.400.error.code` (string, required)
    - one of `"invalid_request"`
  - `CreatePolicy.response.400.error.message` (string, required)
  - `CreatePolicy.response.400.error.issues` (array<object>, optional)
    - `CreatePolicy.response.400.error.issues.path` (string, required)
    - `CreatePolicy.response.400.error.issues.message` (string, required)

### 401

Unauthenticated

#### Example

```json
{
  "error": {
    "code": "unauthenticated",
    "message": "string"
  }
}
```

- `CreatePolicy.response.401.error` (object, required)
  - `CreatePolicy.response.401.error.code` (string, required)
    - one of `"unauthenticated"`
  - `CreatePolicy.response.401.error.message` (string, required)

### 403

AccessDenied | ForbiddenOrigin

#### Example

```json
{
  "error": {
    "code": "access_denied",
    "message": "string"
  }
}
```

Any of:

- [AccessDeniedEncoded](/orgs-api/schemas/AccessDeniedEncoded/)
- [ForbiddenOriginEncoded](/orgs-api/schemas/ForbiddenOriginEncoded/)

### 404

NotFound

#### Example

```json
{
  "error": {
    "code": "not_found",
    "message": "string"
  }
}
```

- `CreatePolicy.response.404.error` (object, required)
  - `CreatePolicy.response.404.error.code` (string, required)
    - one of `"not_found"`
  - `CreatePolicy.response.404.error.message` (string, required)

### 409

IdempotencyConflict | IdempotencyInProgress

#### Example

```json
{
  "error": {
    "code": "idempotency_conflict",
    "message": "string"
  }
}
```

Any of:

- [IdempotencyConflictEncoded](/orgs-api/schemas/IdempotencyConflictEncoded/)
- [IdempotencyInProgressEncoded](/orgs-api/schemas/IdempotencyInProgressEncoded/)

### 429

TooManyRequests

#### Example

```json
{
  "error": {
    "code": "too_many_requests",
    "message": "string"
  }
}
```

- `CreatePolicy.response.429.error` (object, required)
  - `CreatePolicy.response.429.error.code` (string, required)
    - one of `"too_many_requests"`
  - `CreatePolicy.response.429.error.message` (string, required)

### 500

InternalError

#### Example

```json
{
  "error": {
    "code": "internal_error",
    "message": "string"
  }
}
```

- `CreatePolicy.response.500.error` (object, required)
  - `CreatePolicy.response.500.error.code` (string, required)
    - one of `"internal_error"`
  - `CreatePolicy.response.500.error.message` (string, required)

### 503

Unavailable

#### Example

```json
{
  "error": {
    "code": "unavailable",
    "message": "string"
  }
}
```

- `CreatePolicy.response.503.error` (object, required)
  - `CreatePolicy.response.503.error.code` (string, required)
    - one of `"unavailable"`
  - `CreatePolicy.response.503.error.message` (string, required)


Source: https://docs.ezghcloud.com/orgs-api/policies/CreatePolicy/index.md