Sign in
policy_resolve

Estimate Attachment Impact

Estimate how many keys and teams would be affected by a policy attachment.

Use this before creating an attachment to preview the blast radius.

Example Request:

curl -X POST "http://localhost:4000/policies/attachments/estimate-impact" \
    -H "Authorization: Bearer <your_api_key>" \
    -H "Content-Type: application/json" \
    -d '{
        "policy_name": "hipaa-compliance",
        "tags": ["healthcare", "health-*"]
    }'
post/policies/attachments/estimate-impact

Request body

policy_namestring required

Name of the policy to attach.

scopestring nullable

Use '*' for global scope (applies to all requests).

teamsstring[] nullable

Team aliases or patterns this attachment applies to.

keysstring[] nullable

Key aliases or patterns this attachment applies to.

modelsstring[] nullable

Model names or patterns this attachment applies to.

tagsstring[] nullable

Tag patterns this attachment applies to. Supports wildcards (e.g., health-*).

Response

Successful Response

affected_keys_countinteger

Number of keys that would be affected (named + unnamed).

affected_teams_countinteger

Number of teams that would be affected (named + unnamed).

sample_keysstring[]

Sample of affected key aliases (up to 10).

sample_teamsstring[]

Sample of affected team aliases (up to 10).

unnamed_keys_countinteger

Number of affected keys without an alias.

unnamed_teams_countinteger

Number of affected teams without an alias.

Changes

Changed in 5 of the 16 revisions of this API.15

  • 404bba17aabe3See the full diff
    • ○

      api operation id estimate_attachment_impact_policies_attachments_estimate_impact_post removed and replaced with estimate_attachment_impact_policies_attachments_estimate_impact_post_2

      api-operation-id-removed

    • ○

      api tag policy_resolve added

      api-tag-added

    • ○

      api tag policy_engine removed

      api-tag-removed

    This revision also has 1 change that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • 4a06c3148b6c3See the full diff
    • ○

      api operation id estimate_attachment_impact_policies_attachments_estimate_impact_post_2 removed and replaced with estimate_attachment_impact_policies_attachments_estimate_impact_post

      api-operation-id-removed

    • ○

      api tag policy_engine added

      api-tag-added

    • ○

      api tag policy_resolve removed

      api-tag-removed

    This revision also has 19 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • 19cc785a80243See the full diff
    • ○

      api operation id estimate_attachment_impact_policies_attachments_estimate_impact_post removed and replaced with estimate_attachment_impact_policies_attachments_estimate_impact_post_2

      api-operation-id-removed

    • ○

      api tag policy_resolve added

      api-tag-added

    • ○

      api tag policy_engine removed

      api-tag-removed

  • 9c80d9af446a3See the full diff
    • ○

      api operation id estimate_attachment_impact_policies_attachments_estimate_impact_post_2 removed and replaced with estimate_attachment_impact_policies_attachments_estimate_impact_post

      api-operation-id-removed

    • ○

      api tag policy_engine added

      api-tag-added

    • ○

      api tag policy_resolve removed

      api-tag-removed

  • cd946846d9d53See the full diff
    • ○

      api operation id estimate_attachment_impact_policies_attachments_estimate_impact_post removed and replaced with estimate_attachment_impact_policies_attachments_estimate_impact_post_2

      api-operation-id-removed

    • ○

      api tag policy_resolve added

      api-tag-added

    • ○

      api tag policy_engine removed

      api-tag-removed