Put a service's custom web application firewall rules in this order. List every one of its rules.
API key access: full.
apiKeyAuthorizationBearer <pyo_…>An API key from the dashboard's API keys page: Authorization: Bearer pyo_…. Keys can expire, and an expired one gets a 401.
application/jsonPut a service's custom web application firewall rules in this order. List every one of its rules.
API key access: full.
op*"reorderWafRules""reorderWafRules"serviceId*stringids*array<string>Done. Always ok: true, and some operations add more, such as a new API key or a join command. A warning comes with a change that went through but won't fully take effect yet, such as more replicas than the servers have room for.
application/jsoncurl -X POST 'https://your-pyo.example.com/api/v1/ops' \
-H 'Content-Type: application/json' \
-d '{
"ids": [],
"op": "reorderWafRules",
"serviceId": "svc_8kq2x7ad"
}'{}