diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/preview/2018-08-01-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/preview/2018-08-01-preview/managedClusters.json
index 5adb58d75a3d..2e2daa988387 100644
--- a/specification/containerservice/resource-manager/Microsoft.ContainerService/preview/2018-08-01-preview/managedClusters.json
+++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/preview/2018-08-01-preview/managedClusters.json
@@ -1346,6 +1346,10 @@
           "type": "boolean",
           "description": "Whether to enable Kubernetes Role-Based Access Control."
         },
+        "enablePodSecurityPolicy": {
+          "type": "boolean",
+          "description": "Whether to enable Pod Security Policy."
+        },
         "networkProfile": {
           "$ref": "#/definitions/ContainerServiceNetworkProfile",
           "description": "Profile of network configuration."
diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/stable/2018-03-31/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/stable/2018-03-31/managedClusters.json
index 059e26841e31..756ee919be1a 100644
--- a/specification/containerservice/resource-manager/Microsoft.ContainerService/stable/2018-03-31/managedClusters.json
+++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/stable/2018-03-31/managedClusters.json
@@ -1308,6 +1308,10 @@
           "type": "boolean",
           "description": "Whether to enable Kubernetes Role-Based Access Control."
         },
+        "enablePodSecurityPolicy": {
+          "type": "boolean",
+          "description": "Whether to enable Pod Security Policy."
+        },
         "networkProfile": {
           "$ref": "#/definitions/ContainerServiceNetworkProfile",
           "description": "Profile of network configuration."