MENU
Which two characters can be used when writing a policy to reflect a wildcard or path segment? (Select two)
Comprehensive and Detailed in Depth Explanatio n:
Vault policies use specific characters for wildcards and path segments. The HashiCorp Vault documentation states: 'The plus sign (+) can be used to denote a path segment and can be used in the middle of a path. The splat (*) can be used as a wildcard but can only be used at the very end of a path.' These are the only characters designated for such purposes in policy syntax.
The docs add: 'For example, secret/data/* matches all paths under secret/data/, while secret/+/foo matches a single segment like secret/bar/foo.' &, @, $, and # have no special meaning in Vault policies. Thus, C (*) and F (+) are correct.
HashiCorp Vault Documentation - Policies: Policy Syntax