DataPower Nano Gateway API policies

Policies and logic constructs define how the Gateway processes requests and responses during an API call.

Policies act as configurable elements in an assembly. You apply them within an API to control behavior at run time. Each policy adds a specific capability, such as invoking a backend, transforming data, enforcing quotas, or applying authentication.

Built-in policies

Built-in policies provide predefined behavior that you can use directly in your API assembly without writing custom code. These policies support security, routing, rate control, validation, transformation, and operational processing. For more information, see Built-in policies.

Logic constructs

Logic constructs guide how the assembly flow executes. They manage branching, switching, early exits, and error handling without modifying the request or response data. Logic constructs work alongside built-in policies to control the execution path and shape the overall behavior of the assembly. For more information, see Logic constructs.

DataPower Nano Gateway supports a set of built-in policies and logic constructs that appear in four categories. Each category focuses on a specific part of request and response handling.

You can combine policies from all categories to build the flow and behavior your API requires.