Authorization Policies Introduction

Authorization Policies are rules that control which requests are allowed to access your Custom API Endpoints. Each policy defines a condition an incoming request must satisfy. If the condition is not met, the request is denied before your endpoint logic runs.

Think of an Authorization Policy as a security check at the entry point of your API. Just as a building requires a valid ID before entry, your endpoint requires a passing policy before processing any request. This keeps your data and operations protected from unauthorized access.

Please refer to the following articles for more details:

• Creating an Authorization Policy
• Managing Authorization Policies