# Allow access to configure consul secret backend --- rules: - path: "consul_root/au/syd1/config/*" capabilities: - create - update - delete - read - list auth: approle: - tf_vault