Good catch. That would explain the 404 response. But when I tried the data from original post, it was also rejected, with a different status. The keys "any" and "dst-any" are also missing there.Anyways, when trying to put it into production, and uplo...

I realize this is two years after the question, but found this via web search I believe that adding the solution would make sense.One needs to use PATCH method with URL of https://ip/restconf/data/Cisco-IOS-XE-native:native/ip/access-list/extended=z1...