An application requires a specific key/value to be updated in order to process a batch job. The value should be either "true" or "false". However, when developers have been updating the value, sometimes they mistype the value or capitalize on the value, causing the batch job not to run. What feature of a Vault policy can be used in order to restrict the entry to the required values?
- added an allowed_parameters value to the policy
- use a * wildcard at the end of the policy
- change the policy to include the list capability
- add a deny statement for all possible misspellings of the value
Answer(s): A
Explanation:
allowed_parameters - Whitelists a list of keys and values that are permitted on the given path. Setting a parameter with a value of the empty list allows the parameter to contain any value.
Reference:
https://www.vaultproject.io/docs/concepts/policies