Skip to content

Commit f231ae0

Browse files
Attempt to fix broken links
Signed-off-by: Diana <75819066+cloudjumpercat@users.noreply.github.com>
1 parent f2e4bab commit f231ae0

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

app/_kong_plugins/ace/index.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -44,11 +44,11 @@ The Access Control Enforcement (ACE) plugin manages developer access control to
4444

4545
Previously, when you created an API catalog in Dev Portal and linked the APIs to a Gateway Service, {{site.konnect_short_name}} would automatically apply the {{site.konnect_short_name}} application auth (KAA) plugin automatically. API packages uses the ACE plugin instead to manage developer access control to APIs. Unlike the KAA plugin, the ACE plugin can link to control planes to configure access control and create operations for Gateway Services in those control planes.
4646

47-
The ACE plugin runs *after* all other [authentication plugins](/plugins/?category=authentication) run. For example, if you have [Key Authentication](/plugins/key-auth/) configured and it rejects a request, the ACE plugin *will not* run. To allow for multiple authentication plugins, each must set the [`config.anonymous`](/reference/#schema--config-anonymous) plugin configuration. Additionally, the choice to allow or reject an `anonymous` result after all authentication plugins have run needs to be controlled as described in [using multiple authentication methods](/gateway/authentication/#using-multiple-authentication-methods).
47+
The ACE plugin runs *after* all other [authentication plugins](/plugins/?category=authentication) run. For example, if you have [Key Authentication](/plugins/key-auth/) configured and it rejects a request, the ACE plugin *will not* run. To allow for multiple authentication plugins, each must set the [`config.anonymous`](/plugins/ace/reference/#schema--config-anonymous) plugin configuration. Additionally, the choice to allow or reject an `anonymous` result after all authentication plugins have run needs to be controlled as described in [using multiple authentication methods](/gateway/authentication/#using-multiple-authentication-methods).
4848

4949
## Route matching policy
5050

51-
When you configure the ACE plugin, you must set either `required` or `present` for [`config.match_policy`](./reference/#schema--config-match-policy). This determines how the ACE plugin will behave when a request doesn't match an existing Route.
51+
When you configure the ACE plugin, you must set either `required` or `present` for [`config.match_policy`](/plugins/ace/reference/#schema--config-match-policy). This determines how the ACE plugin will behave when a request doesn't match an existing Route.
5252

5353
Keep in mind that misconfigurations can overexpose unintended Routes.
5454

@@ -70,7 +70,7 @@ rows:
7070
Requires every incoming request to match a defined operation from an API or API package in Dev Portal. If a request doesn't match, ACE rejects the request outright with a 404. All traffic will be rejected except operations or Routes in published APIs linked to an ACE-enabled {{site.base_gateway}}.
7171

7272
{:.danger}
73-
> **Warning:** Setting the [`match_policy`](/reference/#schema--config-match-policy) to `required` can **block all traffic with a 404**. Any undefined endpoints will be blocked. If you accidentally enable this in your control planes, this could cause a potential outage in production.
73+
> **Warning:** Setting the [`match_policy`](/plugins/ace/reference/#schema--config-match-policy) to `required` can **block all traffic with a 404**. Any undefined endpoints will be blocked. If you accidentally enable this in your control planes, this could cause a potential outage in production.
7474
limitations: |
7575
* Shuts down all traffic outside of ACE-enabled Dev Portal APIs.
7676
* If the plugin is improperly configured, potentially all traffic could be terminated.

0 commit comments

Comments
 (0)