> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/policy-studio/policy-studio.md).

# Policy Studio

Configure the access policies and Access Bundles that decide who can request which resources, and how those requests get approved.

Policy Studio is where you configure your organization's just-in-time access rules: access policies that route and approve individual resource requests, and Access Bundles that group several resources into one requestable item.

This section covers everything you need to configure and manage both:

* [Configuring access policies](/policy-studio/policy-studio/configure-your-first-access-policy.md): the complete guide to building policies in Policy Studio — identities, resources, filters, actions, access-duration limits, worked examples, and how P0 evaluates a request.
* [Access policy YAML reference](/policy-studio/policy-studio/access-policy-yaml-reference.md): the YAML syntax behind access policies, for the YAML editor, the Access policies API, or Terraform.
* [Access bundles](/policy-studio/policy-studio/access-bundles.md): group multiple resource accesses into a single requestable item, so a user requests everything a task needs in one step.
* [AWS filtering](/policy-studio/policy-studio/aws-filtering.md), [Google Cloud filtering](/policy-studio/policy-studio/google-cloud-filtering.md), [Microsoft Azure filtering](/policy-studio/policy-studio/microsoft-azure-filtering.md), and [SSH filtering](/policy-studio/policy-studio/ssh-filtering.md): narrow which resources within each integration can be requested.
* [Agentic access policies](/policy-studio/policy-studio/agentic-access-policies.md): route or auto-approve requests made by AI agents through the P0 AI Gateway (see [P0 Runtime Access for AI](/readme/agentic-control-plane.md)).

## Policy Studio in the app

To use Policy Studio, go to [p0.app](https://p0.app) and navigate to **Policy Studio**. Select **Control** to configure access policies, or **Access Bundles** to group resources into a single requestable item. Saving a policy configuration here configures your organization to use policy-based approvals, rather than default approvals.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-35397c393ee4c3531cfb79cdf2f535a25255eb56%2Fimage.png?alt=media" alt="P0 Policy Studio Control view for configuring access policies" width="563"><figcaption></figcaption></figure>

## Manage access policies programmatically

You can also manage access policies without using Policy Studio:

* [Access policies API](/policy-studio/policy-studio/access-policies-api.md): create, read, update, and delete policies over HTTP. Use this to script incremental changes or to build policy management into your own tools.
* [Manage P0 policies and settings as code](/p0-api/manage-p0-policies-and-settings-as-code.md): manage policies as version-controlled, reviewable configuration with the [`p0_access_policy`](https://registry.terraform.io/providers/p0-security/p0/latest/docs/resources/access_policy) resource, alongside your RBAC role assignments and JIT access settings.

All three methods manage the same access policy configuration, so a change made through one is reflected in the others. Access Bundles are configured only in Policy Studio, and can't be managed through the API or the Terraform provider.

## New to Policy Studio?

Start with the [Configure your first access policy](/getting-started/configure-your-first-access-policy.md) tutorial for a hands-on walkthrough of access policies. For the full policy format, worked scenarios, and evaluation order, see [Configuring access policies](/policy-studio/policy-studio/configure-your-first-access-policy.md). To group several resources into a single requestable item, see [Access bundles](/policy-studio/policy-studio/access-bundles.md).