resource "vault_policy" "infra_tools" {
  name = "infra_tools"
  policy = <<EOT
path "secret/infrastructure/*" {
    capabilities = ["create", "read", "update", "list", "patch"]
}
path "secret/infrastructure" {
    capabilities = ["read", "list"]
}
EOT
}

resource "vault_policy" "iot" {
  name = "iot"
  policy = <<EOT
path "secret/iot/*" {
    capabilities = ["create", "read", "update", "delete", "list", "patch"]
}
path "secret/iot" {
    capabilities = ["read", "list"]
}
EOT
}

resource "vault_policy" "networking" {
  name = "networking"
  policy = <<EOT
path "secret/networking/*" {
    capabilities = ["create", "read", "update", "delete", "list", "patch"]
}
path "secret/networking" {
    capabilities = ["read", "list"]
}
EOT
}