Add wildcard support for the API Routes in access policies

[aamplugin]

Currently, there are no ways to restrict access to all API Routes and exclude only few. Would be lovely to have the ability to do something like this:

{
    "Effect": "deny",
    "Resource": "Route:*"
}

or even more granular access controls. For example, restrict the ability to invoke any RESTful API endpoint with GET verb:

{
    "Effect": "deny",
    "Resource": "Route:RESTful:*:GET"
}