Versions

List versions of a policy set

client.Zones.PolicySets.Versions.List(ctx, policySetID, params) (*ZonePolicySetVersionListResponse, error)

GET/zones/{zone_id}/policy-sets/{policy_set_id}/versions

Create a new immutable policy set version

client.Zones.PolicySets.Versions.New(ctx, policySetID, params) (*PolicySetVersion, error)

POST/zones/{zone_id}/policy-sets/{policy_set_id}/versions

Get a specific policy set version

client.Zones.PolicySets.Versions.Get(ctx, versionID, params) (*PolicySetVersion, error)

GET/zones/{zone_id}/policy-sets/{policy_set_id}/versions/{version_id}

Activate a policy set version

client.Zones.PolicySets.Versions.Update(ctx, versionID, params) (*PolicySetVersion, error)

PATCH/zones/{zone_id}/policy-sets/{policy_set_id}/versions/{version_id}

Archive a policy set version

client.Zones.PolicySets.Versions.Archive(ctx, versionID, params) (*PolicySetVersion, error)

DELETE/zones/{zone_id}/policy-sets/{policy_set_id}/versions/{version_id}

List policy versions in a policy set version

client.Zones.PolicySets.Versions.ListPolicies(ctx, versionID, params) (*ZonePolicySetVersionListPoliciesResponse, error)

GET/zones/{zone_id}/policy-sets/{policy_set_id}/versions/{version_id}/policies

ModelsExpand Collapse

type PolicySetVersion struct{…}

ID string

CreatedAt Time

formatdate-time

CreatedBy string

Manifest PolicySetManifest

Entries []PolicySetManifestEntry

PolicyID string

PolicyVersionID string

Sha stringoptional

SHA-256 of the policy version content, populated by the server

ManifestSha string

Hex-encoded SHA-256 of the canonicalized manifest

OwnerType PolicySetVersionOwnerType

Who manages this policy set version:

"platform" — managed by the Keycard platform (system policy set versions).
"customer" — managed by the tenant (custom policy set versions).

Accepts one of the following:

const PolicySetVersionOwnerTypePlatform PolicySetVersionOwnerType = "platform"

const PolicySetVersionOwnerTypeCustomer PolicySetVersionOwnerType = "customer"

PolicySetID string

SchemaVersion string

Schema version pinned to this policy set version. Determines the Cedar schema used for evaluation when activated.

Version int64

Active booloptional

Whether this policy set version is currently bound with mode='active'

ArchivedAt Timeoptional

formatdate-time

ArchivedBy stringoptional

Attestation AttestationStatementoptional

Decoded content of an Attestation JWS payload. Describes the exact policy set version composition at attestation time. This schema defines what consumers see after base64url-decoding the Attestation.payload field.

AttestedAt Time

formatdate-time

AttestedBy string

KeyID string

Key ID of the signing key used to produce the attestation signature. Matches the "kid" in the JWS protected header.

ManifestSha string

SHA-256 of the policy set version manifest. Verifiers MUST check this matches the policy_set_version.manifest_sha to detect attestation/version mismatches.

PolicySetID string

PolicySetVersion int64

Status AttestationStatementStatus

Event that produced this attestation. "created" is the initial attestation at version creation; "re_signed" is a re-attestation after key rotation (same content, new signature).

Accepts one of the following:

const AttestationStatementStatusCreated AttestationStatementStatus = "created"

const AttestationStatementStatusReSigned AttestationStatementStatus = "re_signed"

Type AttestationStatementType

Statement type discriminator

V int64

Statement schema version

ZoneID string