etc/authzd/policy0.cedar


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

@id("static_assets")
permit (principal, action, resource)
when
{
  context has path &&
  context has method &&
  (context.method == "GET" || context.method == "HEAD") &&
  (context.path like "*.css" ||
   context.path like "*.js" ||
   context.path like "*.ico" ||
   context.path like "*.png" ||
   context.path like "*.jpg" ||
   context.path like "*.jpeg" ||
   context.path like "*.gif" ||
   context.path like "*.bmp" ||
   context.path like "*.html")
};