...
“*” - This will match any permission in the corresponding application that does not have a resource associated. Note: this will not match any permission that has a resource associated.
“*: *” - This will match any permission that has any resource associated. Note: this will not match a permission without a resource.
“permissionName: *” - This will match “permissionName” with any resources. Note: this will not match a permission without a resource, if the policy needs to consider both a permission with and without a resource, two entries are needed: “permissionName, permissionName: *”.
“*: resourceName“ - This will match any permission with the resource “resourceName”.
...