Restrict ACL to specific Keys only?

Vault
1

Is it possible to create an ACL that limits access to specific keys within a secret?

1 Like
2

Hi @chinswain

I want to do this as well.
Do you know if it’s possible to do?

Thanks

3

Depends what you mean by keys… the nomenclature around the Vault K/V secrets engine is confusing, because the keys (in the URL path) have values which are themselves JSON objects, and therefore have another layer of (sub)keys themselves.

It is not possible to define ACLs on the inner (sub)keys.