You can edit both API-level and operation-level policies while the managed API or managed API group is in the active, shared, or deprecated state. When you update the policies of a managed API or managed API group, the update will immediately impact the deployed managed API at run time.
Example
If your API's rate limit is 1,000 requests per 60 minutes, you can increase it to 2,000 instantly without downtime or token invalidation.
You want to change the basic authentication to anonymous authentication of an active managed API at run time. Changing the authentication method updates the managed API access immediately.
Previously, deactivating a managed API broke the OAuth associations, requiring client reassignment after reactivation. Now, OAuth associations remain intact during policy edits, so existing tokens continue working.
ASK INFAPreview
