Using Wild Cards in Policies

The Policy Service supports policy definitions using an asterisk (*) as the wild card. Only * is supported as a wild card and it can not be escaped as in \*. A * must:

• Match zero or more occurrences of any character.

• Span across multiple levels in a URL.

The following wild card matching rules assume the wildcard character is * and the delimiter character is /.

• * matches zero or more characters, including /, in the resource name.

• * matches one or more characters, including /, if the * appears at the end of the resource name and it is immediately preceded by a /. For example, abc/*doesn't match abc.

• Multiple consecutive / characters don't match with a single /. For example, abc/*/xyz doesn't match abc/xyz.

• For purposes of comparison, trailing / characters will not be considered as part of the resource name. For example, abc/ or abc// will be treated the same as abc.