vault_userpass_policy_demo.hcl

# First enable the userpass auth engine 
# 
# vault auth enable userpass
# vault write auth/userpass/users/alice password=alice policies="default,dev"
# vault write auth/userpass/users/bob password=bob policies="default,prod"

# Then create these policies
# dev

path "sys/mounts" {
    capabilities = ["read","list"]
}

path "secret/*" {
    capabilities = ["list"]
}

path "secret/" {
    capabilities = ["read"]
  }

path "secret/data/dev*" {
    capabilities = ["read","list","create","update","delete"]
}

# prod

path "sys/mounts" {
    capabilities = ["read","list"]
}

path "secret/*" {
    capabilities = ["list"]
}

path "secret/" {
    capabilities = ["read"]
  }

path "secret/data/prod*" {
    capabilities = ["read","list","create","update","delete"]
}