Hello, my playfab title was recently spammed and I would like to figure out how to get to my API access policy so I can modify the permissions so you cannot loginwithcustomid.
Hello, my playfab title was recently spammed and I would like to figure out how to get to my API access policy so I can modify the permissions so you cannot loginwithcustomid.
You can follow these steps: First, call GetPolicy and copy all statements and "PolicyVersion". Then, call UpdatePolicy, this is the request body:
{
"PolicyName": "ApiPolicy",
"Statements": [
],
"OverwritePolicy": true,
"PolicyVersion": 8
}
Paste the statements you copied from GetPolicy’s result.
And add this into the statement:
{
"Resource": "pfrn:api--/Client/LoginWithCustomID",
"Action": "*",
"Effect": "Deny",
"Principal": "*",
"Comment": "This statement disables request to LoginWithCustomID"
}
Make sure "PolicyVersion” is same as the one in GetPolicy’s result. 
1 Person is following this question.
