IBM API Connect provides a rich set of policies that allow you to control message processing in the Gateway server when an API is invoked, but sometimes the policy capabilities you find on the palette of the assembly editor don't fully meet your business needs.

User Defined Policies (UDPs) are a key capability in API Connect that allow you to add custom processing capabilities to better meet your requirements. A rich set of examples were provided for API Connect V5 (7 years ago!!!) which were used extensively in the field. It cannot be overstated how important these policies were to the adoption of API Connect. I've seen firsthand that many customers have used sample UDPs from the V5 sample policy repo as the basis for their own UDPs. The number of sample policies available for the API Gateway have been very limited, until now!

I'm excited to draw your attention now to new UDPs that we've recently added specifically designed for the API Gateway. These are comparable to their V5 counterparts but crafted specifically for the APIGW runtime in mind. There are a number of packaging and deployment options for API Gateway policies, so we created these policies to be useful not only as a good starting point for the policy code of your first (or next) next UDP, but the varied implementation styles (YAML-based vs config zip) are there give you concrete examples to play with to see what best fits your application.

The new policies:
ratelimit-basic
clientip-filter
jwe-encrypt
jwe-decrypt
jws-sign
jws-verify

We will continue to add policies as they come available, so drop in occasionally to see what's new!
https://github.com/ibm-apiconnect/policy-apigw/tree/master/user-defined-policies

Thanks to Steve Linn  and Rob Puryear for contributing these policies