resource "vault_policy" "admin" {
  name = "admin"

  policy = <<EOF
path "*" {
  capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}
  EOF
}