{
  "permissions": {
    "allow": [
      "Bash(curl:*)",
      "Bash(python3:*)",
      "Bash(echo \"PID: $!\")",
      "Bash(aws ec2:*)",
      "Read(//usr/lib/**)",
      "Bash(sudo dnf:*)",
      "Bash(sudo tee:*)",
      "Bash(sudo nginx:*)",
      "Bash(sudo systemctl:*)",
      "Bash(sudo certbot:*)"
    ]
  }
}