From 0d644f0ae6654907281013177cc8c4e741bb684d Mon Sep 17 00:00:00 2001
From: Venktesh <ve.patel@f5.com>
Date: Fri, 19 Sep 2025 12:27:14 +0100
Subject: [PATCH] fix: policy order

---
 content/nic/configuration/policy-resource.md | 46 ++++++++++----------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md
index 5edf8b2d0..d92a3894e 100644
--- a/content/nic/configuration/policy-resource.md
+++ b/content/nic/configuration/policy-resource.md
@@ -793,29 +793,6 @@ The feature is implemented using the NGINX [ngx_http_proxy_module](https://nginx
 
 A VirtualServer/VirtualServerRoute can reference multiple cache policies. However, only one can be applied: every subsequent reference will be ignored.
 
-## Using Policy
-
-You can use the usual `kubectl` commands to work with Policy resources, just as with built-in Kubernetes resources.
-
-For example, the following command creates a Policy resource defined in `access-control-policy-allow.yaml` with the name `webapp-policy`:
-
-```shell
-kubectl apply -f access-control-policy-allow.yaml
-
-policy.k8s.nginx.org/webapp-policy configured
-```
-
-You can get the resource by running:
-
-```shell
-kubectl get policy webapp-policy
-
-NAME            AGE
-webapp-policy   27m
-```
-
-For `kubectl get` and similar commands, you can also use the short name `pol` instead of `policy`.
-
 ### WAF
 
 {{< call-out "note" >}} The feature is implemented using the NGINX Plus [NGINX App Protect WAF Module]({{< ref "/nap-waf/" >}}). {{< /call-out >}}
@@ -863,6 +840,29 @@ policies:
 
 In this example NGINX Ingress Controller will use the configuration from the first policy reference `waf-policy-one`, and ignores `waf-policy-two`.
 
+## Using Policy
+
+You can use the usual `kubectl` commands to work with Policy resources, just as with built-in Kubernetes resources.
+
+For example, the following command creates a Policy resource defined in `access-control-policy-allow.yaml` with the name `webapp-policy`:
+
+```shell
+kubectl apply -f access-control-policy-allow.yaml
+
+policy.k8s.nginx.org/webapp-policy configured
+```
+
+You can get the resource by running:
+
+```shell
+kubectl get policy webapp-policy
+
+NAME            AGE
+webapp-policy   27m
+```
+
+For `kubectl get` and similar commands, you can also use the short name `pol` instead of `policy`.
+
 ### Applying Policies
 
 You can apply policies to both VirtualServer and VirtualServerRoute resources. For example: