Update Security Settings

Update the security settings for a zone.

PATCH/organizations/{organizationId}/zones/{zoneId}/security-settings

Use it in a workflow

Add a step and choose the Salesforce Commerce Cloud connector.
Pick the Update Security Settings action (under Zones (Data API)).
Fill in the fields below, then reference the result from later steps as {{updateSecuritySettings.response.data}}.

Request

Path parameters

zoneIdstringrequired

organizationIdstringrequired

An identifier for the organization the request is being made by

Request body

Enter the body as JSON in the step's Body field.

hstsobject

The security header for a zone.

enabledboolean

Enable strict transport security.

includeSubdomainsboolean

Include all subdomains for strict transport security.

maxAgenumber

Max age in seconds of the strict transport security.

preloadboolean

Preload any URLs that are included in the response headers.

securityLevelstring

Security profile for your zone, which will automatically adjust each of the security settings.

One ofoffessentially_offlowmediumhighunder_attack

tls13Enabledboolean

Enable Crypto TLS 1.3 feature for this zone.

wafEnabledboolean

Enable WAF (OWASP) protection for this zone. Not applicable for zones using WAFv2.

alwaysUseHttpsbooleanrequired

Redirect all http requests to https.

json

{
  "alwaysUseHttps": true,
  "hsts": {
    "enabled": true,
    "includeSubdomains": true,
    "maxAge": 31536000,
    "preload": false
  },
  "securityLevel": "medium",
  "tls13Enabled": true,
  "wafEnabled": true
}

Response

Returns 200 with an object. Read it in later steps with {{updateSecuritySettings.response.data.<field>}}.

dataobject

hstsobject4 fields