Policies are the set of configurable, execution statements that control the behavior of requests and responses in the APIM service. For example, a Validate-JWT policy reads a JWT and validates it for authorization. In this section, we will see various policies used in ShipAnyWhere's APIM service.