HashiCorp Certified - Vault Associate Course - Vault Policies—Capabilities

The video tutorial explains how to define paths and capabilities in Vault policies, focusing on the differences between create and update capabilities. It provides examples of policies for generating database credentials and managing access to specific paths. The tutorial also covers the importance of list privileges for accessing paths in the UI and CLI.

What are the capabilities that can be defined in a Vault policy?

What is the role of the 'sudo' capability in Vault?

What is the significance of the 'deny' capability in a Vault policy?

What happens if a policy has both 'create' and 'deny' capabilities for the same path?

Explain the difference between the 'create' and 'update' capabilities in Vault.

Explain the importance of having the correct capabilities when configuring Vault.

How does the 'list' capability differ from the 'read' capability in Vault?

Describe the process of creating a new policy in Vault.

What are the implications of using wildcards in Vault policies?

How do you ensure that a user can browse to a specific path in the Vault UI?