Hi @aniketp1012 The most secure way would be to map the servlet to resource type, AEM would take care of the access part through relevant ACL'sBelow is one nice article on this topic that would help you indeed: https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/secure-sling-s...