Which two characters can be used when writing a policy to reflect a wildcard or path segment? (Select two)

Comprehensive and Detailed in Depth

Vault policies use specific characters for wildcards and path segments. The HashiCorp Vault

documentation states: "The plus sign (+) can be used to denote a path segment and can be used in

the middle of a path. The splat (*) can be used as a wildcard but can only be used at the very end of a

path." These are the only characters designated for such purposes in policy syntax.

The docs add: "For example, secret/data/* matches all paths under secret/data/, while secret/+/foo

matches a single segment like secret/bar/foo." &, @, $, and # have no special meaning in Vault

policies. Thus, C (*) and F (+) are correct.

Reference:

HashiCorp Vault Documentation - Policies: Policy Syntax