diff --git a/ansible/roles/kong-api/defaults/main.yml b/ansible/roles/kong-api/defaults/main.yml
index 74b25853efd5948fcaf523d8156eca5899515582..614a8f51be662b38f0f5f16dba0a6171ff9ee819 100644
--- a/ansible/roles/kong-api/defaults/main.yml
+++ b/ansible/roles/kong-api/defaults/main.yml
@@ -262,7 +262,6 @@ kong_apis:
   plugins:
   - name: cors
   - "{{ statsd_pulgin }}"
-  - name: rate-limiting
     config.policy: local
     config.hour: "{{ medium_rate_limit_per_hour }}"
     config.limit_by: ip
@@ -272,6 +271,7 @@ kong_apis:
     config.required: false
     config.enabled: false
 
+  - name: rate-limiting
 - name: assignRole
   uris: "{{ user_service_prefix }}/v1/role/assign"
   upstream_url: "{{ learning_service_url }}/v1/user/assign/role"
@@ -10095,6 +10095,24 @@ kong_apis:
     - name: request-size-limiting
       config.allowed_payload_size: "{{ small_request_size_limit }}"
   
+- name: courseEvalBulk
+  uris: "{{ course_service_prefix }}/v1/course/admin/course/eval"
+  upstream_url: "{{ lms_service_url }}/v1/course/admin/course/eval"
+  strip_uri: true
+  plugins:
+    - name: jwt
+    - name: cors
+    - "{{ statsd_pulgin }}"
+    - name: acl
+      config.whitelist:
+        - 'courseAccess'
+    - name: rate-limiting
+      config.policy: local
+      config.hour: "{{ medium_rate_limit_per_hour }}"
+      config.limit_by: credential
+    - name: request-size-limiting
+      config.allowed_payload_size: "{{ small_request_size_limit }}"
+
 - name: adminlistCourseEnrollments
   uris: "{{ course_service_prefix }}/v2/user/courses/admin/list"
   upstream_url: "{{ lms_service_url }}/v2/user/courses/admin/list"
@@ -10135,4 +10153,4 @@ kong_apis:
     config.allowed_payload_size: "{{ small_request_size_limit }}"
   - name: opa-checks
     config.required: false
-    config.enabled: false
\ No newline at end of file
+    config.enabled: false