🌍 HCL (Terraform)medium
2. Read + list on a path glob
Write ONE path block on the glob secret/data/app/* granting BOTH the `read` and `list` capabilities (and only those two).
How to approach this
`read` and `list` are DIFFERENT: `list` lets a caller enumerate the key names under a path without reading their values, while `read` returns a value. You often need both to browse and fetch. A trailing `*` glob matches everything under the prefix, so one block can cover a whole app's secrets.
main.tf