Test workload identity policy

Requires an organization owner or an API key with api-admin. Transformations are required; admission and authorization rules are optional. The test does not persist policy or issue credentials.

Authentication

AuthorizationBearer

Console user session, Mixlayer API key, or Mixlayer workload access token supplied as a Bearer token.

Path parameters

org_idstringRequired

Organization ID

Request

This endpoint expects an object.

assertionmap from strings to anyRequired

Example external assertion supplied directly to the policy evaluator.

attribute_transformationsmap from strings to stringsRequired

CEL expressions mapping assertion values to normalized attributes.

attribute_conditionstring or nullOptional

Optional CEL condition that admits or rejects the workload.

authorization_ruleslist of objects or nullOptional

Optional ordered authorization rules to evaluate after admission.

Response

Policy test result

dataobject

Non-issuing result for testing an assertion against workload identity policy.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

413

Content Too Large Error

415

Unsupported Media Type Error

422

Unprocessable Entity Error

500

Internal Server Error