A Web Resource Collection is part of a security constraint and describes a URL pattern and HTTP method pair that refer to resources that need to be protected.