This message was deleted.
# general
s
This message was deleted.
g
I spent some time looking into this. I think the Pulumi provider can support JSON or HCL as the
policy
string value, but Vault itself seems to require "JSON-escaping a JSON-encoded string" per https://github.com/hashicorp/vault/issues/3802.
So you can build a JSON object in code, but you still need to stringify and then encode it to pass to Vault.