upload policy file