Skip to main content

Vault Policy Builder

v1.0.0

HashiCorp Vault HCL policy builder — paths, capabilities, denied params, MFA hints.

HashiCorp Vault Policy (HCL)
# Vault policy: app-policy

path "secret/data/app/*" {
  capabilities = ["read", "list"]
}

path "auth/token/renew-self" {
  capabilities = ["update"]
}

# Apply:
vault policy write app-policy policy.hcl

# Attach to AppRole:
vault write auth/approle/role/app-policy token_policies="app-policy"

# Test:
vault token create -policy="app-policy"
vault token capabilities <token> secret/data/app/*