title: Hashicorp Vault ACLs
body: <p>In Vault documentation about <a href="https://www.vaultproject.io/docs/configuration/storage/consul.html" rel="nofollow noreferrer">consul as backend storage</a>, ACL is allowing write access to keys, services, nodes, agents and sessions. But what I need is more strict Consul ACL for Vault HA feature where Consul is used as HA-Backend.  </p>
  
  <p>Would in this case having only this ACL below be sufficient?</p>
  
  <pre><code>{
    "key": {
      "vault/": {
        "policy": "write"
      }
    },
    "service": {
      "vault": {
        "policy": "write"
      }
    }
  }
  </code></pre>
  
  <p>Thanks!</p>