When writing a Vault policy, the valid capabilities are predefined, and modify is not among them. The HashiCorp Vault documentation states: " When writing a policy in Vault, permissions which can be applied to paths include create, read, update, delete, list, deny, and sudo. " These capabilities dictate what actions a token can perform on a path.
The docs elaborate: " Capabilities are specific permissions assigned to paths in a policy. For example, create allows creating new resources, update modifies existing ones, delete removes them, list retrieves listings, and read accesses data. " Modify is not a recognized capability; it’s likely a misnomer for update. Thus, B is the correct answer.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit