Create or update the inference region policy

PUT /_inference/_region_policy

The region policy restricts inference to a set of allowed geographic areas or cloud service provider regions.

Required authorization

Authentication

Api key

Authorization: <value>

Elasticsearch APIs support key-based authentication. You must create an API key and use the encoded value in the request header. For example:

		curl -X GET "${ES_URL}/_cat/indices?v=true" \
  -H "Authorization: ApiKey ${API_KEY}"

To get API keys, use the /_security/api_key APIs.

Basic

Authorization: Basic <credentials>

Bearer

Authorization: Bearer <token>

Elasticsearch APIs support the use of bearer tokens in the Authorization HTTP header to authenticate with the API. For examples, refer to Token-based authentication services

Query parameters

Request body

Response

application/json

Examples

Request Console 1 / 7 languages

Run PUT _inference/_region_policy to restrict inference to a specific set of cloud service provider regions.

Console Kibana Dev Tools

PUT _inference/_region_policy
{
    "region_policy": {
        "allowed_regions": [
            { "csp": "aws", "region": "us-east-1" },
            { "csp": "aws", "region": "eu-west-1" }
        ]
    }
}

JavaScript Elasticsearch JavaScript Client

const response = await client.inference.putRegionPolicy({
  region_policy: {
    allowed_regions: [
      {
        csp: "aws",
        region: "us-east-1",
      },
      {
        csp: "aws",
        region: "eu-west-1",
      },
    ],
  },
});

Python Elasticsearch Python Client

resp = client.inference.put_region_policy(
    region_policy={
        "allowed_regions": [
            {
                "csp": "aws",
                "region": "us-east-1"
            },
            {
                "csp": "aws",
                "region": "eu-west-1"
            }
        ]
    },
)

curl Shell

curl -X PUT "$ELASTICSEARCH_URL/_inference/_region_policy" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "region_policy": {
      "allowed_regions": [
        {
          "csp": "aws",
          "region": "us-east-1"
        },
        {
          "csp": "aws",
          "region": "eu-west-1"
        }
      ]
    }
  }'

Java Elasticsearch Java Client

client.inference().putRegionPolicy(p -> p
    .regionPolicy(r -> r
        .allowedRegions(List.of(CspRegion.of(c -> c
                .csp("aws")
                .region("us-east-1")
            ),CspRegion.of(c -> c
                .csp("aws")
                .region("eu-west-1")
            )))
    )
);

PHP Elasticsearch PHP Client

$resp = $client->inference()->putRegionPolicy([
    "body" => [
        "region_policy" => [
            "allowed_regions" => array(
                [
                    "csp" => "aws",
                    "region" => "us-east-1",
                ],
                [
                    "csp" => "aws",
                    "region" => "eu-west-1",
                ],
            ),
        ],
    ],
]);

Ruby Elasticsearch Ruby Client

response = client.inference.put_region_policy(
  body: {
    "region_policy": {
      "allowed_regions": [
        {
          "csp": "aws",
          "region": "us-east-1"
        },
        {
          "csp": "aws",
          "region": "eu-west-1"
        }
      ]
    }
  }
)

Response

A successful response when creating a region policy that allows specific cloud service provider regions.

{
  "region_policy": {
    "allowed_regions": [
      { "csp": "aws", "region": "us-east-1" },
      { "csp": "aws", "region": "eu-west-1" }
    ]
  },
  "created_at": "2026-07-13T12:00:00.000Z",
  "created_by": "inference_user"
}

Request Console 1 / 2 languages

Run PUT _inference/_region_policy to restrict inference to a specific set of geographic areas.

Console Kibana Dev Tools

PUT _inference/_region_policy
{
    "region_policy": {
        "allowed_geos": ["us", "eu"]
    }
}

Generated from the API spec

curl Shell

curl -X PUT "$ELASTICSEARCH_URL/_inference/_region_policy" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
      "region_policy": {
          "allowed_geos": ["us", "eu"]
      }
  }'

Generated from the API spec

Required authorization

Authentication

Query parameters

Request body { }

Response

Request body