Policy as Code with Conjur

This is the core Conjur 101 lab. You will author a declarative, multi-branch Conjur OSS policy that models a real workload: a "db" branch holding a database password variable and a database host, and an "app" branch holding an application host and a layer. You will load the policy into the running Conjur server, set secret values, then grant the app host least-privilege (read and execute) on ONLY the database password. Finally you will authenticate as the app host and prove the model works: the permitted secret is returned, while an un-permitted secret is denied. You will also practice loading, replacing, and updating policy safely and add a second consumer with least privilege. All work uses Conjur CLI v8 and policy YAML, never a web UI.