1- name: allow-api-routes 2 action: ALLOW 3 expression: 4 all: 5 - '!(method == "HEAD" || method == "GET")' 6 - path.startsWith("/api/")