Oracle Exam 1Z0-1084-22 Topic 2 Question 7 Discussion

Adding Request Policies and Response Policies to API Deployment Specifications:

You can control the behavior of an API deployment you create on an API gateway by adding request and response policies to the API deployment specification:

a request policy describes actions to be performed on an incoming request from a caller before it is sent to a back end

a response policy describes actions to be performed on a response returned from a back end before it is sent to a caller

You can use request policies to:

limit the number of requests sent to back-end services

enable CORS (Cross-Origin Resource Sharing) support

provide authentication and authorization

You can add request and response policies that apply globally to all routes in an API deployment specification, and also (in some cases) request and response policies that apply only to particular routes.

Note the following:

No response policies are currently available.

API Gateway request policies and response policies are different to IAM policies, which control access to Oracle Cloud Infrastructure resources.

You can add request and response policies to an API deployment specification by:

using the Console

editing a JSON file

References:

https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingrequestpolicies.htm