diff --git a/DynamoDbEncryption/dafny/DynamoDbItemEncryptor/src/InternalLegacyOverride.dfy b/DynamoDbEncryption/dafny/DynamoDbItemEncryptor/src/InternalLegacyOverride.dfy
index 0747a009f..5e6d30473 100644
--- a/DynamoDbEncryption/dafny/DynamoDbItemEncryptor/src/InternalLegacyOverride.dfy
+++ b/DynamoDbEncryption/dafny/DynamoDbItemEncryptor/src/InternalLegacyOverride.dfy
@@ -13,7 +13,7 @@ module {:extern "software.amazon.cryptography.dbencryptionsdk.dynamodb.itemencry
     static method {:extern} Build(encryptorConfig: Types.DynamoDbItemEncryptorConfig)
       returns (output: Result<Option<InternalLegacyOverride>, Types.Error>)
 
-    const policy: DDBE.LegacyPolicy
+    const {:extern} policy: DDBE.LegacyPolicy
 
     method {:extern} EncryptItem(input: Types.EncryptItemInput)
       returns (output: Result<Types.EncryptItemOutput, Types.Error>)
diff --git a/DynamoDbEncryption/runtimes/net/Extern/InternalLegacyConfig.cs b/DynamoDbEncryption/runtimes/net/Extern/InternalLegacyConfig.cs
index 193953967..b1470b558 100644
--- a/DynamoDbEncryption/runtimes/net/Extern/InternalLegacyConfig.cs
+++ b/DynamoDbEncryption/runtimes/net/Extern/InternalLegacyConfig.cs
@@ -8,7 +8,18 @@ namespace software.amazon.cryptography.dbencryptionsdk.dynamodb.itemencryptor.in
 
   public partial class InternalLegacyOverride
   {
-
+    public software.amazon.cryptography.dbencryptionsdk.dynamodb.internaldafny.types._ILegacyPolicy _policy
+    {
+      get => software.amazon.cryptography.dbencryptionsdk.dynamodb.internaldafny.types.LegacyPolicy.create_FORBID__LEGACY__ENCRYPT__FORBID__LEGACY__DECRYPT();
+      set { }
+    }
+    public software.amazon.cryptography.dbencryptionsdk.dynamodb.internaldafny.types._ILegacyPolicy policy
+    {
+      get
+      {
+        return this._policy;
+      }
+    }
     public static Wrappers_Compile._IResult<
       Wrappers_Compile._IOption<InternalLegacyOverride>,
       _IError
diff --git a/DynamoDbEncryption/runtimes/rust/src/software_externs.rs b/DynamoDbEncryption/runtimes/rust/src/software_externs.rs
index f0a77646a..3a7dcc1b9 100644
--- a/DynamoDbEncryption/runtimes/rust/src/software_externs.rs
+++ b/DynamoDbEncryption/runtimes/rust/src/software_externs.rs
@@ -58,6 +58,9 @@ pub mod software {
                                 }
 
                                 impl InternalLegacyOverride {
+                                    pub fn policy(&self) -> Rc<LegacyPolicy> {
+                                        self.r#__i_policy.clone()
+                                    }
                                     pub fn Build(
                                         config: &Rc<crate::software::amazon::cryptography::dbencryptionsdk::dynamodb::itemencryptor::internaldafny::types::DynamoDbItemEncryptorConfig>,
                                     ) -> Rc<