---
title: "POST /policy-update-keys"
method: POST
path: "/policy-update-keys"
tags: ["Policies"]
---

# POST /policy-update-keys

`POST /policy-update-keys`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/policy-update-keys`
- Auth: none declared

## Request body

- PolicyUpdateKeys
  - `allowed-algorithms` string[]: Specify allowed key algorithms (e.g., [RSA2048,AES128GCM])
  - `allowed-key-names` string[]: Specify allowed protection key names. To enforce using the account's default protection key, use 'default-account-key'
  - `allowed-key-types` string[]: Specify allowed key protection types (dfc, classic-key)
  - `id` string, required: Policy id
  - `json` boolean: Set output format to JSON
  - `max-rotation-interval-days` integer: Set the maximum rotation interval for automatic key rotation.
  - `object-types` string[]: The object type this policy will apply to (items, targets)
  - `path` string: The path the policy refers to
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication

## Response `200`

- PoliciesUpdateOutput

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/identity-access.md) - [All operations](https://skmtc.dev/akeyless/apis/identity-access/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/identity-access/revisions/6fbc3858ec88?raw)