diff --git a/backend/streetdrop-api/src/main/java/com/depromeet/security/config/WebSecurityConfig.java b/backend/streetdrop-api/src/main/java/com/depromeet/security/config/WebSecurityConfig.java
index 14371bee..ef626960 100644
--- a/backend/streetdrop-api/src/main/java/com/depromeet/security/config/WebSecurityConfig.java
+++ b/backend/streetdrop-api/src/main/java/com/depromeet/security/config/WebSecurityConfig.java
@@ -31,10 +31,7 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .requestMatchers("/users/*").authenticated()
                 .requestMatchers("/users/me/*").authenticated()
                 .requestMatchers("/users/me/items/*").authenticated()
-                .requestMatchers(HttpMethod.GET, "/items/*").authenticated()
-                .requestMatchers(HttpMethod.POST, "/items/*").authenticated()
-                .requestMatchers(HttpMethod.PATCH, "/items/*").authenticated()
-                .requestMatchers(HttpMethod.DELETE, "/items/*").authenticated()
+                .requestMatchers("/items/**").authenticated()
                 .requestMatchers(HttpMethod.POST, "notifications/tokens").authenticated()
                 .anyRequest().permitAll().and()
                 .anonymous().and()