---
title: "Download the Workload Protection policy (US1-FED)"
method: GET
path: "/api/v2/security/cloud_workload/policy/download"
tags: ["CSM Threats"]
---

# Download the Workload Protection policy (US1-FED)

`GET /api/v2/security/cloud_workload/policy/download`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/security/cloud_workload/policy/download`
- Auth: API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`

The download endpoint generates a Workload Protection policy file from your currently active
Workload Protection agent rules, and downloads them as a `.policy` file. This file can then be deployed to
your agents to update the policy running in your environment.

**Note**: This endpoint should only be used for the Government (US1-FED) site.

## Response `200`

OK

## Other responses

- `403`: Not Authorized
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)
