zivildienst/vault/example_service_policy.hcl

# Read-only access to all secrets in key-value store
path "kv/data/guidelines/production/api" {
  capabilities = ["read"]
}

path "kv/data/guidelines/staging/api" {
  capabilities = ["read"]
}