When managing custom policies in Anypoint API Manager, the implementation version update behaviour differs depending on the type of semantic version bump published to Exchange:
Why Does This Happen?
This is working as designed. API Manager uses semantic versioning (semver) conventions to determine when to auto-update the implementation:
Symptoms
After applying a new patch version of a custom policy to an instance in the API Manager:
Option 1 — UI (immediate)
The implementation will immediately update to the latest published patch version, and the new implementation version will be reflected in the Mule application logs.
Option 2 — REST API (for automation / CI/CD pipelines)
Send a PATCH request to the policy endpoint with the implementationAsset field:
PATCH /apimanager/api/v1/organizations/{orgId}/environments/{envId}/apis/{apiId}/policies/{policyId}
{
"implementationAsset": {
"groupId": "{your-group-id}",
"assetId": "{your-policy-asset-id}",
"version": "{new-patch-version}"
}
}
Note: The version specified must be a published, runtime-compatible implementation. If not, the API returns: "The policy implementation from request body is not available for the API."
This API call can be incorporated into your CI/CD pipeline immediately after publishing the new patch version to Exchange — ensuring the implementation is always kept current without manual UI intervention.
005387938

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.