Which command is used to assign an ACL policy to an existing Identity Entity?
Trap 1: vault policy write entity my-entity
Policy write is for defining the policy content.
Trap 2: vault write identity/entity policies=my-policy
Entity policies are set on the entity object itself.
Trap 3: vault write auth/token/create policies=my-policy
This creates a token, not an entity-based policy mapping.
- A
vault write identity/entity/name/my-entity policies=my-policy
This updates the entity object to include the specified policy.
- B
vault policy write entity my-entity
Why wrong: Policy write is for defining the policy content.
- C
vault write identity/entity policies=my-policy
Why wrong: Entity policies are set on the entity object itself.
- D
vault write auth/token/create policies=my-policy
Why wrong: This creates a token, not an entity-based policy mapping.
- E
vault map entity-policy
Why wrong: This command does not exist.