# Centrally enforce policy as code for GraphQL APIs

DevFeed: [Centrally enforce policy as code for GraphQL APIs](<https://devfeed.tech/articles/centrally-enforce-policy-as-code-for-graphql-apis-23252.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/centrally-enforce-policy-as-code-for-graphql-apis>)

Author: Vivek Ravishankar

Published: 2023-12-12T14:00:00Z

Content type: article

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [policy-as-code](<https://devfeed.tech/topics/policy-as-code.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [API Platform](<https://devfeed.tech/topics/api-platform.md>), [Open Policy Agent](<https://devfeed.tech/topics/open-policy-agent.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [api-platform](<https://devfeed.tech/tags/api-platform.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [opa](<https://devfeed.tech/tags/opa.md>), [policy-as-code](<https://devfeed.tech/tags/policy-as-code.md>)

## AI overview

Apollo describes using GraphOS schema directives to enforce policy-as-code authorization at the type and field levels of federated GraphQL supergraphs. The directives are generally available to GraphOS Enterprise customers and can integrate with authorization systems such as Open Policy Agent.

## Source excerpt

Although many in the industry consider GraphQL a replacement for existing API technologies, it is at its most powerful when used as a central orchestration layer between apps and existing services. This layer, implemented as a federated graph (or supergraph, for short), acts as a self-service API platform that accelerates development velocity for both frontend and backend teams.