API Default Policy Configuration

What is API Default Policy?

An API Default Policy is a predefined set of policies that will automatically apply to every API created within the project - unless manually overridden later.

It can include rules such as: Rate limiting, IP restriction, CORS settings, Request/response transformations, and so on…

This ensures consistency and security across all APIs in the project.

Only the administrator who manages the project can configure default policies.

How to configure API Default Policy?

After successfully creating the Project and Gateway, administrator needs to access the API Default Policy from the APIM Console menu bar.

From here, you can select the project that needs to set default policy and apply one or many policies for the project. There are 2 types of policy: Inbound and Outbound. Each policy will require a different configuration to be applied to the project. For more details on how to configure each policy, please refer to API Policy Guide.

These policy rules will be automatically applied when a user creates a new API. You can still override or customize policies on individual APIs later if needed.

Now that the project and gateway are ready, you can move on to user onboarding and authorization.