vault-kasten-policy-example.hcl

path "transit/encrypt/kasten" {
  capabilities = [ "update" ]
}

path "transit/decrypt/kasten" {
  capabilities = [ "update" ]
}

path "transit/keys/kasten" {
  capabilities = [ "read" ]
}