---
title: Using the Deployment Manager
description: The Deployment Manager simplifies policy updates by enabling policy writers to deploy new policies to a central deployment package store to be read by the PingAuthorize Server running in embedded mode.
component: pingauthorize
version: 11.0
page_id: pingauthorize:pingauthorize_server_administration_guide:paz_deployment_manager
canonical_url: https://docs.pingidentity.com/pingauthorize/11.0/pingauthorize_server_administration_guide/paz_deployment_manager.html
revdate: December 3, 2025
section_ids:
  steps: Steps
---

# Using the Deployment Manager

The Deployment Manager simplifies policy updates by enabling policy writers to deploy new policies to a central deployment package store to be read by the PingAuthorize Server running in embedded mode.

This process is twofold:

* Policy writers use the Policy Editor to publish policies in a deployment package to a deployment package store.

* Updated deployment packages are picked up by the PingAuthorize Policy Decision Service from the deployment package store.

  |   |                                                                                          |
  | - | ---------------------------------------------------------------------------------------- |
  |   | You configure the interval that the server checks for updates in the store during setup. |

This allows a policy writer to deploy new policies without the manual process of exporting a deployment package that is then uploaded into the server through the administrative console.

The Deployment Manager can use deployment package stores that are based on:

* A directory in the filesystem

* An Amazon Simple Storage Service (Amazon S3) bucket

* Azure Blob storage

Package stores hold deployment packages in a central location that the Policy Editor publishes to and the PingAuthorize Server reads from, as illustrated in the following diagram:

![Screen capture of the policy deployment package flow from the Policy Editor, which publishes to a Deployment Package Store, to PingAuthorize Server, which polls the store for new deployment packages at a user-configured interval](_images/nkb1665364301170.png)

To use the Deployment Manager:

## Steps

1. Define a deployment package store.

   |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
   | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | * For a filesystem store, you must have a directory on the filesystem that the Policy Editor has read-write access to.

   * Amazon S3 buckets must be configured with a secret key and an access key for use. You can find more information in [Setting up an Amazon S3 deployment package store](paz_amazon_deployment_store_setup.html).

   * For Azure storage, you must set up an Azure storage account and a container. For later use, record the Connection string value found in your account's Access key settings. |

2. [Use an options file to configure the Policy Editor to publish policies to a store](paz_config_pe_publish_policies.html).

3. [Create and deploy deployment packages to the deployment package store](paz_publish_deployment_package_to_store.html).

4. Add the deployment package store for read access to the PingAuthorize Server:

   1. [Add a filesystem deployment package store](paz_filesystem_deploy_package.html).

   2. [Add an Amazon S3 deployment package store](paz_amazons3_deploy_package.html).

   3. [Add an Azure deployment package store](paz_azure_deploy_package_store.html),

5. [Configure the Policy Decision Service to read from your deployment package store](paz_config_embedded_pdp.html#config_embedded_dps_store).