java-tutorials/spring-cloud-modules/spring-cloud-vault/sample-policy.hcl

path "secret/fakebank" {
    capabilities = ["read"]
    allowed_parameters = {
        "api_key" = []
    }
}