diff --git a/pantheon.upstream.yml b/pantheon.upstream.yml
index 69fab1048f..9a648d3bb7 100644
--- a/pantheon.upstream.yml
+++ b/pantheon.upstream.yml
@@ -10,8 +10,8 @@ enforce_https: transitional
 
 # See https://pantheon.io/docs/pantheon-yml#protected-web-paths for usage.
 protected_web_paths:
-  - /private
-  - /wp-content/uploads/private
+  - /private/
+  - /wp-content/uploads/private/
   - /xmlrpc.php
 
 # By default, any 'protected_web_paths' added to the pantheon.yml file