I am using API Gateway version 10.7 and I am trying to figure out how schema validation works for SOAP and REST API’s that are created by importing a WSDL or Swagger file. There is a policy for API validation that can be added for more custom validation but that does not appear to be needed for API’s that don’t have custom content types etc… and schema validation appears to occur without adding this policy specifically on the API.

Is Schema Validation performed automatically out of the box for SOAP and REST API’s? Is there a global setting to turn schema validation on or off for all incoming request?