Boomi Platform API Reference (1.0.0) - AtomSecurityPolicies
The Atom Security Policies object represents custom updates to the current Java Virtual Machine (JVM) HIGH security policy for a Runtime cloud or a Runtime cluster with forked execution enabled. As the owner of a Runtime cloud or Runtime cluster, you can retrieve any custom updates to the HIGH security policy for your container. You can also update the policy by adding, changing, or removing custom runtime permissions. Refer to the topic Security policies for Clouds and Runtime clusters for more information. Retrieving a security policy is an asynchronous process:
- The client sends a GET request that specifies a container ID to the .
- The platform returns a security policy token for the specified Runtime cloud or Runtime cluster.
- You send one or more GET requests that include the security policy token.
- The platform returns one of the following:
- Status code 202 while the request is in progress.
- Status code 200 with the custom contents of the security policy when the request is complete.
Required Privileges
You need these privileges in the target environment:
Write access
- API — Use the Boomi Platform API to access account data.
- ATOM_MANAGEMENT — Configure and administer integration runtimes.
Read access
- API — Use the Boomi Platform API to access account data.
- ATOM_MANAGEMENT_READ_ONLY — Read only access to runtime configuration and administration.
Modifies or updates an AtomSecurityPolicies object
Updates the security policy for the specified Runtime cloud or Runtime cluster. You can add, update, or delete permissions by using the UPDATE operation. You can add custom Java runtime permissions you specify in an UPDATE operation to the appropriate High-security policy file. In addition, all High-security policy files contain custom permissions that you specify in the
Authorizations:
path Parameters
| id required | string The runtime (container) id for the applicable runtime (accepts only Runtime cloud cluster and regular Runtime cluster types, no basic runtimes or cloud attachments). |
Request Body schema: optional
| atomId required | string The ID of the Runtime cloud or Runtime cluster. |
required | object (AtomSecurityPoliciesType) |
object (AtomSecurityPoliciesType) | |
object (AtomSecurityPoliciesType) | |
object (AtomSecurityPoliciesType) |
Responses
Response Schema:
| atomId required | string The ID of the Runtime cloud or Runtime cluster. |
required | object (AtomSecurityPoliciesType) |
object (AtomSecurityPoliciesType) | |
object (AtomSecurityPoliciesType) | |
object (AtomSecurityPoliciesType) |
Request samples
- Payload
{- "atomId": "8f535694-c152-42f3-9923-2f805a17775a",
- "common": {
- "policies": [
- {
- "privilegeType": "runtimePermission",
- "arguments": [
- {
- "value": "arg2"
}
]
}
]
}
}Response samples
- 200
- 403
- 410
- 503
{- "@type": "AtomSecurityPolicies",
- "common": {
- "@type": "AtomSecurityPoliciesType",
- "policies": [
- {
- "@type": "AtomSecurityPolicy",
- "arguments": [
- {
- "@type": "AtomSecurityPolicyArgumentType",
- "value": "arg2"
}
], - "privilegeType": "runtimePermission"
}
]
}, - "runner": {
- "@type": "AtomSecurityPoliciesType",
- "policies": [ ]
}, - "worker": {
- "@type": "AtomSecurityPoliciesType",
- "policies": [ ]
}, - "browser": {
- "@type": "AtomSecurityPoliciesType",
- "policies": [ ]
}, - "atomId": "8f535694-c152-42f3-9923-2f805a17775a"
}Retrieves an AtomSecurityPolicies object by identifier
The initial GET operation returns a security policy token for the specified Runtime cloud or Runtime cluster. Subsequent GET operations return status code 202 (while the request is in progress) or the custom contents of a security policy based on the token that was returned.
The GET operation returns only custom runtime permissions that you added to the security policy, not the entire policy file. If you did not update the security policy for a given Runtime cloud or Runtime cluster, the response to a GET operation is empty.
Authorizations:
path Parameters
| id required | string The runtime (container) id for the applicable runtime (accepts only Runtime cloud cluster and regular runtime cluster types, no basic runtimes or cloud attachments). |
Responses
Response Schema:
required | object (AsyncToken) |
| responseStatusCode required | integer <int32> |
Response samples
- 200
- 403
- 410
- 503
{- "AsyncOperationTokenResult": {
- "responseStatusCode": "202",
- "asyncToken": {
- "token": "AtomSecurityPolicies-6896e107-b210-454e-8fcf-73684d1e4903"
}
}
}Retrieves AtomSecurityPolicies objects by token
Using the token from the initial GET response, send an HTTP GET where accountId is the account with which you are authenticating.
Custom Java runtime permissions listed in the <common> section apply to all High security policy files (procrunner-HIGH.policy, procbrowser-HIGH.policy, and procworker-HIGH.policy). Custom permissions listed in a specific section, such as <runner>, apply only to the associated security policy file.
Authorizations:
path Parameters
| token required | string Takes in the token from a previous call to return a result. |
Responses
Response Schema:
| responseStatusCode required | integer <int32> |
| numberOfResults | integer <int32> |
Array of objects (AtomSecurityPolicies) |
Response samples
- 200
- 403
- 410
- 503
{- "AtomSecurityPolicies": {
- "atomId": "4ce4a1c2-5bd9-4bd9-9201-46198e2d88db",
- "common": {
- "policies": {
- "privilegeType": "RuntimePermission",
- "arguments": [
- {
- "value": "arg1"
}, - {
- "value": "arg2"
}
]
}
}, - "runner": null,
- "worker": null,
- "browser": {
- "policies": {
- "privilegeType": "Test",
- "arguments": [
- {
- "value": "arg1"
}, - {
- "value": "arg2"
}
]
}
}, - "numberOfResults": "1",
- "responseStatusCode": "202",
- "result": [
- {
- "atomId": "4ce4a1c2-5bd9-4bd9-9201-46198e2d88db",
- "common": {
- "policies": {
- "privilegeType": "RuntimePermission",
- "arguments": [
- {
- "value": "arg1"
}, - {
- "value": "arg2"
}
]
}
}, - "runner": null,
- "worker": null,
- "browser": {
- "policies": {
- "privilegeType": "Test",
- "arguments": [
- {
- "value": "arg1"
}, - {
- "value": "arg2"
}
]
}
}
}
]
}
}