Policies

Policies are reusable, Gateway-enforced governance rules: reject or flag traffic that doesn't match a naming convention, auth requirement, or other rule you define, independent of any one principal's ACLs or quotas. A policy is defined once, then attached to a Virtual Cluster or Gateway Group when you create it.

Policies are scoped per environment: manage them from an environment's Policies tab, or see which environments have policies configured from the Policies card in Platform Settings.

Create a Policy

1. Navigate to Platform Settings → Environments → [environment] → Policies.
2. Select New Policy.
3. Enter a Display Name and an optional Description.
4. Choose a Mode: Enforce rejects matching operations, while a monitor-only mode flags them without blocking traffic.
5. Under Rules, select a rule type (for example Topic Naming) and select Add Rule.
6. Select Create.

New Policy dialog with display name, mode, and rules fields

Once created, a policy appears in the environment's Policies list with the rules it enforces, the clusters and Gateway Groups it's attached to, and its mode.

Next Steps

• Environments covers the other environment-scoped settings a policy sits alongside, including bootstrap tokens and certificate authorities.
• Kafka Clusters covers the clusters a policy can be attached to.