• HashiCorp Developer

  • HashiCorp Cloud Platform
  • Terraform
  • Packer
  • Consul
  • Vault
  • Boundary
  • Nomad
  • Waypoint
  • Vagrant
Vault
  • Install
  • Tutorials
  • Documentation
  • API
  • Integrations
  • Try Cloud(opens in new tab)
  • Sign up
Vault Home

Documentation

Skip to main content
  • Documentation
  • What is Vault?
  • Use Cases

  • Browser Support
  • Installing Vault
    • Overview
    • replication
    • sentinel
    • telemetry
    • ui
    • Log Completed Requests
    • Entropy Augmentation
      ENTENT
    • kms_library
      ENTENT

  • Vault Integration Program
  • Vault Interoperability Matrix
  • Troubleshoot






  • Glossary


  • Resources

  • Tutorial Library
  • Certifications
  • Community Forum
    (opens in new tab)
  • Support
    (opens in new tab)
  • GitHub
    (opens in new tab)
  1. Developer
  2. Vault
  3. Documentation
  4. Configuration
  5. sentinel
  • Vault
  • v1.11.x
  • v1.10.x
  • v1.9.x
  • v1.8.x
  • v1.7.x
  • v1.6.x
  • v1.5.x
  • v1.4.x

ยปsentinel Stanza

The sentinel stanza specifies configurations for Vault's Sentinel integration.

sentinel {
  additional_enabled_modules = ["http"]
}

Requirements

A valid Vault Enterprise license is required for use of Sentinel policies.

sentinel Parameters

The sentinel stanza currently supports only one parameter, additional_enabled_modules.

  • additional_enabled_modules `(string array: [])`` - This parameter specifies a list of imports (modules) to allow in Sentinel policies.

    Vault currently enables all of Sentinel's standard imports except the "http" import, which has performance and security implications. In the future, if any new Sentinel imports are not automatically enabled by Vault, users could enable them in this stanza. Note that this setting cannot be used to load custom import plugins.

    Warning: Care should be taken when enabling imports (modules) which could have performance and security implications in policies. Enabling the "http" import could cause your Vault servers to submit outbound requests to arbitrary endpoints.
    See the Sentinel HTTP Import documentation for more information.

Edit this page on GitHub

On this page

  1. sentinel Stanza
  2. Requirements
  3. sentinel Parameters
Give Feedback(opens in new tab)
  • Certifications
  • System Status
  • Terms of Use
  • Security
  • Privacy
  • Trademark Policy
  • Trade Controls
  • Give Feedback(opens in new tab)