diff --git a/Amazon-S3-API.md b/Amazon-S3-API.md
index 0f470ed..92718a2 100644
--- a/Amazon-S3-API.md
+++ b/Amazon-S3-API.md
@@ -207,6 +207,19 @@ For public access, you can configure an identity with name "anonymous", usually
 }
 ```
 
+### Actions with wildcard
+
+Wildcard is partially supported for prefix lookup. The following example actions are allowed:
+
+```
+Read
+Read:bucket
+Read:bucket_prefix*
+Read:bucket/*
+Read:bucket/a/b/*
+
+```
+
 ## Presigned URL
 
 Presigned URL is supported. See [[AWS-CLI-with-SeaweedFS#presigned-url]] for example.