diff --git a/generated/storage/policy.pb.go b/generated/storage/policy.pb.go
index bee936d9fb804..f25673f5ff102 100644
--- a/generated/storage/policy.pb.go
+++ b/generated/storage/policy.pb.go
@@ -445,7 +445,7 @@ func (Exclusion_WorkloadKind) EnumDescriptor() ([]byte, []int) {
 // Next tag: 29
 type Policy struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
-	Id    string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty" search:"Policy ID,hidden" sql:"pk,index=btree" crYaml:"-"` // @gotags: search:"Policy ID,hidden" sql:"pk,index=btree" crYaml:"-"
+	Id    string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty" search:"Policy ID,hidden" sql:"pk" crYaml:"-"` // @gotags: search:"Policy ID,hidden" sql:"pk" crYaml:"-"
 	// Name of the policy.  Must be unique.
 	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty" search:"Policy" sql:"unique" crYaml:"policyName"` // @gotags: search:"Policy" sql:"unique" crYaml:"policyName"
 	// Free-form text description of this policy.
diff --git a/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration.go b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration.go
new file mode 100644
index 0000000000000..be44d97a2de65
--- /dev/null
+++ b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration.go
@@ -0,0 +1,24 @@
+// Code generated by make bootstrap_migration generator. DO NOT EDIT.
+package m227tom228
+
+import (
+	"github.com/stackrox/rox/generated/storage"
+	"github.com/stackrox/rox/migrator/migrations"
+	"github.com/stackrox/rox/migrator/types"
+)
+
+const (
+	startSeqNum = 227
+)
+
+var (
+	migration = types.Migration{
+		StartingSeqNum: startSeqNum,
+		VersionAfter:   &storage.Version{SeqNum: int32(startSeqNum + 1)},
+		Run:            migrate,
+	}
+)
+
+func init() {
+	migrations.MustRegisterMigration(migration)
+}
diff --git a/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_impl.go b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_impl.go
new file mode 100644
index 0000000000000..24c466b013cec
--- /dev/null
+++ b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_impl.go
@@ -0,0 +1,13 @@
+package m227tom228
+
+import (
+	"github.com/pkg/errors"
+	"github.com/stackrox/rox/migrator/types"
+)
+
+func migrate(database *types.Databases) error {
+	// policies_pkey already indexes id. Drop the duplicate without blocking writes
+	// from an old Central that may still be running during a rolling upgrade.
+	_, err := database.PostgresDB.Exec(database.DBCtx, "DROP INDEX CONCURRENTLY IF EXISTS policies_id")
+	return errors.Wrap(err, "dropping duplicate policies_id index")
+}
diff --git a/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_test.go b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_test.go
new file mode 100644
index 0000000000000..7a80b304f922f
--- /dev/null
+++ b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/migration_test.go
@@ -0,0 +1,151 @@
+//go:build sql_integration
+
+package m227tom228
+
+import (
+	"context"
+	"strings"
+	"testing"
+
+	frozenSchema "github.com/stackrox/rox/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/test/schema"
+	pghelper "github.com/stackrox/rox/migrator/migrations/postgreshelper"
+	"github.com/stackrox/rox/migrator/types"
+	"github.com/stackrox/rox/pkg/postgres/pgutils"
+	"github.com/stretchr/testify/suite"
+)
+
+type migrationTestSuite struct {
+	suite.Suite
+
+	db  *pghelper.TestPostgres
+	ctx context.Context
+}
+
+func TestMigration(t *testing.T) {
+	suite.Run(t, new(migrationTestSuite))
+}
+
+func (s *migrationTestSuite) SetupTest() {
+	s.ctx = context.Background()
+	s.db = pghelper.ForT(s.T(), false)
+
+	pgutils.CreateTableFromModel(s.ctx, s.db.GetGormDB(), frozenSchema.CreateTablePoliciesStmt)
+	// Concurrent indexes are applied separately from GORM table creation.
+	for _, index := range frozenSchema.CreateTablePoliciesStmt.Indexes {
+		_, err := s.db.Exec(s.ctx, index.CreateSQL)
+		s.Require().NoError(err)
+	}
+
+	// Use enough rows and current statistics for selective lookups to naturally
+	// choose an index; do not force index scans with enable_seqscan = off.
+	_, err := s.db.Exec(s.ctx, `INSERT INTO policies (id, name, serialized)
+		SELECT md5(n::text), 'policy-' || n, convert_to('policy-' || n, 'UTF8')
+		FROM generate_series(1, 10000) AS n`)
+	s.Require().NoError(err)
+	_, err = s.db.Exec(s.ctx, "ANALYZE policies")
+	s.Require().NoError(err)
+}
+
+func (s *migrationTestSuite) TearDownTest() {
+	s.db.Teardown(s.T())
+}
+
+func (s *migrationTestSuite) dbs() *types.Databases {
+	return &types.Databases{
+		GormDB:     s.db.GetGormDB(),
+		PostgresDB: s.db.DB,
+		DBCtx:      s.ctx,
+	}
+}
+
+func (s *migrationTestSuite) indexExists(name string) bool {
+	var exists bool
+	s.Require().NoError(s.db.QueryRow(s.ctx, `SELECT EXISTS (
+		SELECT 1 FROM pg_indexes WHERE schemaname = 'public' AND indexname = $1
+	)`, name).Scan(&exists))
+	return exists
+}
+
+func (s *migrationTestSuite) TestMigration() {
+	s.Require().True(s.indexExists("policies_id"))
+	s.Require().True(s.indexExists("policies_pkey"))
+	s.Require().True(s.indexExists("uni_policies_name"))
+
+	for attempt := 1; attempt <= 2; attempt++ {
+		s.Require().NoError(migration.Run(s.dbs()), "migration attempt %d", attempt)
+		s.Require().False(s.indexExists("policies_id"))
+		s.Require().True(s.indexExists("policies_pkey"))
+		s.Require().True(s.indexExists("uni_policies_name"))
+
+		// Both runs must leave every policy and its stored contents unchanged.
+		var count int
+		s.Require().NoError(s.db.QueryRow(s.ctx, `SELECT count(*) FROM policies
+			WHERE name ~ '^policy-[0-9]+$'
+			AND id = md5(substring(name FROM 8))
+			AND serialized = convert_to(name, 'UTF8')`).Scan(&count))
+		s.Equal(10000, count)
+		s.Require().NoError(s.db.QueryRow(s.ctx, "SELECT count(*) FROM policies").Scan(&count))
+		s.Equal(10000, count)
+	}
+}
+
+func (s *migrationTestSuite) TestIDQueriesUsePrimaryKey() {
+	s.Require().NoError(migration.Run(s.dbs()))
+
+	const firstID = "c4ca4238a0b923820dcc509a6f75849b"
+	const secondID = "c81e728d9d4c2f636f067f89cc14862c"
+	testCases := map[string]struct {
+		query    string
+		args     []any
+		expected map[string]string
+	}{
+		"single ID": {
+			query:    "SELECT id, serialized FROM policies WHERE id = $1",
+			args:     []any{firstID},
+			expected: map[string]string{firstID: "policy-1"},
+		},
+		"multiple IDs": {
+			query:    "SELECT id, serialized FROM policies WHERE id IN ($1, $2)",
+			args:     []any{firstID, secondID},
+			expected: map[string]string{firstID: "policy-1", secondID: "policy-2"},
+		},
+		"ID array": {
+			query:    "SELECT id, serialized FROM policies WHERE id = ANY($1::text[])",
+			args:     []any{[]string{firstID, secondID}},
+			expected: map[string]string{firstID: "policy-1", secondID: "policy-2"},
+		},
+	}
+	for name, tc := range testCases {
+		s.Run(name, func() {
+			rows, err := s.db.Query(s.ctx, tc.query, tc.args...)
+			s.Require().NoError(err)
+			defer rows.Close()
+
+			actual := make(map[string]string)
+			for rows.Next() {
+				var id string
+				var serialized []byte
+				s.Require().NoError(rows.Scan(&id, &serialized))
+				actual[id] = string(serialized)
+			}
+			s.Require().NoError(rows.Err())
+			s.Equal(tc.expected, actual)
+
+			rows, err = s.db.Query(s.ctx, "EXPLAIN (COSTS OFF) "+tc.query, tc.args...)
+			s.Require().NoError(err)
+			defer rows.Close()
+
+			var planLines []string
+			for rows.Next() {
+				var line string
+				s.Require().NoError(rows.Scan(&line))
+				planLines = append(planLines, line)
+			}
+			s.Require().NoError(rows.Err())
+			plan := strings.Join(planLines, "\n")
+			s.T().Log(plan)
+			s.Contains(plan, "policies_pkey")
+			s.NotContains(plan, "policies_id")
+		})
+	}
+}
diff --git a/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/test/schema/policies.go b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/test/schema/policies.go
new file mode 100644
index 0000000000000..d28f67f871b29
--- /dev/null
+++ b/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index/test/schema/policies.go
@@ -0,0 +1,44 @@
+// Frozen pre-migration schema copied from pkg/postgres/schema/policies.go.
+
+package schema
+
+import (
+	"time"
+
+	"github.com/lib/pq"
+	"github.com/stackrox/rox/generated/storage"
+	"github.com/stackrox/rox/pkg/postgres"
+)
+
+var (
+	// CreateTablePoliciesStmt holds the create statement for table `policies`.
+	CreateTablePoliciesStmt = &postgres.CreateStmts{
+		GormModel: (*Policies)(nil),
+		Children:  []*postgres.CreateStmts{},
+		Indexes: []*postgres.IndexDefinition{
+			{Name: "policies_id", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS policies_id ON policies USING btree (id)"},
+		},
+	}
+)
+
+const (
+	// PoliciesTableName specifies the name of the table in postgres.
+	PoliciesTableName = "policies"
+)
+
+// Policies holds the Gorm model for Postgres table `policies`.
+type Policies struct {
+	ID                 string           `gorm:"column:id;type:varchar;primaryKey"`
+	Name               string           `gorm:"column:name;type:varchar;unique"`
+	Description        string           `gorm:"column:description;type:varchar"`
+	Disabled           bool             `gorm:"column:disabled;type:bool"`
+	Categories         *pq.StringArray  `gorm:"column:categories;type:text[]"`
+	LifecycleStages    *pq.Int32Array   `gorm:"column:lifecyclestages;type:int[]"`
+	Severity           storage.Severity `gorm:"column:severity;type:integer"`
+	EnforcementActions *pq.Int32Array   `gorm:"column:enforcementactions;type:int[]"`
+	LastUpdated        *time.Time       `gorm:"column:lastupdated;type:timestamp"`
+	SORTName           string           `gorm:"column:sortname;type:varchar"`
+	SORTLifecycleStage string           `gorm:"column:sortlifecyclestage;type:varchar"`
+	SORTEnforcement    bool             `gorm:"column:sortenforcement;type:bool"`
+	Serialized         []byte           `gorm:"column:serialized;type:bytea"`
+}
diff --git a/migrator/runner/all.go b/migrator/runner/all.go
index 40cda51fdd633..dc37b2f077a1d 100644
--- a/migrator/runner/all.go
+++ b/migrator/runner/all.go
@@ -20,4 +20,5 @@ import (
 	_ "github.com/stackrox/rox/migrator/migrations/m_224_to_m_225_populate_deployment_containers_imageidv2"
 	_ "github.com/stackrox/rox/migrator/migrations/m_225_to_m_226_drop_unused_child_idx_indexes"
 	_ "github.com/stackrox/rox/migrator/migrations/m_226_to_m_227_backfill_report_type"
+	_ "github.com/stackrox/rox/migrator/migrations/m_227_to_m_228_drop_duplicate_policy_index"
 )
diff --git a/pkg/migrations/internal/seq_num.go b/pkg/migrations/internal/seq_num.go
index 27c34574712f8..309ae9a4a4235 100644
--- a/pkg/migrations/internal/seq_num.go
+++ b/pkg/migrations/internal/seq_num.go
@@ -5,5 +5,5 @@ var (
 	// CurrentDBVersionSeqNum is the current DB version number.
 	// This must be incremented every time we write a migration.
 	// It is a shared constant between central and the migrator binary.
-	CurrentDBVersionSeqNum = 227
+	CurrentDBVersionSeqNum = 228
 )
diff --git a/pkg/postgres/schema/alerts.go b/pkg/postgres/schema/alerts.go
index 61e8a46ed68e0..dd345545ad1a8 100644
--- a/pkg/postgres/schema/alerts.go
+++ b/pkg/postgres/schema/alerts.go
@@ -22,7 +22,6 @@ var (
 		GormModel: (*Alerts)(nil),
 		Children:  []*postgres.CreateStmts{},
 		Indexes: []*postgres.IndexDefinition{
-			{Name: "alerts_policy_id", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS alerts_policy_id ON alerts USING btree (policy_id)"},
 			{Name: "alerts_lifecyclestage", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS alerts_lifecyclestage ON alerts USING btree (lifecyclestage)"},
 			{Name: "alerts_deployment_id", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS alerts_deployment_id ON alerts USING btree (deployment_id)"},
 			{Name: "alerts_time", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS alerts_time ON alerts USING btree (time)"},
diff --git a/pkg/postgres/schema/policies.go b/pkg/postgres/schema/policies.go
index 0966e272b9fa9..f431b0a15bcb7 100644
--- a/pkg/postgres/schema/policies.go
+++ b/pkg/postgres/schema/policies.go
@@ -21,9 +21,6 @@ var (
 	CreateTablePoliciesStmt = &postgres.CreateStmts{
 		GormModel: (*Policies)(nil),
 		Children:  []*postgres.CreateStmts{},
-		Indexes: []*postgres.IndexDefinition{
-			{Name: "policies_id", CreateSQL: "CREATE INDEX CONCURRENTLY IF NOT EXISTS policies_id ON policies USING btree (id)"},
-		},
 	}
 
 	// PoliciesSchema is the go schema for table `policies`.
diff --git a/proto/storage/policy.proto b/proto/storage/policy.proto
index 922f9fba17715..f34fc8cd5149c 100644
--- a/proto/storage/policy.proto
+++ b/proto/storage/policy.proto
@@ -16,7 +16,7 @@ option java_package = "io.stackrox.proto.storage";
 
 //Next tag: 29
 message Policy {
-  string id = 1; // @gotags: search:"Policy ID,hidden" sql:"pk,index=btree" crYaml:"-"
+  string id = 1; // @gotags: search:"Policy ID,hidden" sql:"pk" crYaml:"-"
   // Name of the policy.  Must be unique.
   string name = 2; // @gotags: search:"Policy" sql:"unique" crYaml:"policyName"
   // Free-form text description of this policy.