Which of the following policies would permit a user to generate dynamic credentials on a database?

Which of the following policies would permit a user to generate dynamic credentials on a database?
A . path "database/creds/read_only_role" {
capabilities = ["read"]
}
B . path "database/creds/read_only_role" {
capabilities = ["generate"]
}
C . path "database/creds/read_only_role" {
capabilities = ["list"]
}
D . path "database/creds/read_only_role" {
capabilities = ["sudo"]
}

View Answer

Answer: A

Explanation:

The HTTP request is a GET which corresponds to a read capability. Thus, to grant access to generate database credentials, the policy would grant read access on the appropriate path.