Given the policy below, what would the user be able to access?
1. path "*" {
2. capabilities = ["create", "update", "read", "list", "delete", "sudo"]
3. }
- anything they want to within Vault
- ability to enable a secret engine at the path *
- only make changes to policies
- nothing, since the policy doesn't specify any specific paths
Answer(s): A
Explanation:
All interactions with Vault are done through its pathing structure. If you create a policy with a wildcard, you are giving them access to any path within Vault