Select the policies below that permit you to create a new entry of foo=bar at the path /secrets/apps/my_secret (select three)

Select the policies below that permit you to create a new entry of foo=bar at the path /secrets/apps/my_secret (select three)
A . path "secrets/apps/my_secret" {
capabilities = ["create"]
allowed_parameters = {
"foo" = []
}
}
B . path "secrets/+/my_secret" {
capabilities = ["create"]
allowed_parameters = {
"*" = ["bar"]
}
}
C . path "secrets/apps/my_secret" {
capabilities = ["update"]
}
D . path "secrets/apps/*" {
capabilities = ["create"]
allowed_parameters = {
"foo" = ["bar", "zip"]
}
}

View Answer

Answer: A,B

Explanation:

Setting a parameter with a value of the empty list allows the parameter to contain any value.

Setting a parameter with a value of a populated list allows the parameter to contain only those values.

If any keys are specified, all non-specified parameters will be denied unless the parameter "*" is set to an empty array, which will allow all other parameters to be modified. Parameters with specific values will still be restricted to those values.