asmhatreandClaude Sonnet 5.5
1497fba911
Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b6tTs7ivgTNq4ZrurU
9 lines
314 B
HCL
9 lines
314 B
HCL
# Least privilege for the application's own token: read two KV v2 paths, nothing else.
|
|
# KV v2 inserts "data/" into the API path, so the policy path is secret/data/<name>, not secret/<name>.
|
|
path "secret/data/secrets-demo" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "secret/data/application" {
|
|
capabilities = ["read"]
|
|
}
|