Skip to main content
Welcome to Objective 8 of the HashiCorp Certified Consul Associate certification. In this lesson, you’ll discover how to secure your Consul environment using the Access Control List (ACL) system, ensuring fine-grained access control across services.
The image outlines objectives for securing services with Access Control Lists (ACLs), including setting up ACL systems, creating policies, managing token lifecycles, and performing CLI and API requests using tokens. It also indicates a difficulty level of 2.

​
Lesson Objectives

TaskDescription
Setup and ConfigurationEnable ACLs (disabled by default), bootstrap the system, and explore core ACL components
Policy CreationDefine permission rules, write HCL or JSON policies, and attach them to tokens
Token Lifecycle ManagementCreate tokens with single or multiple policies, configure automatic revocation, assign identities
Authenticated OperationsPerform authorized CLI, HTTP API, and UI requests using valid tokens
Consul ACLs are disabled by default. You must enable and bootstrap the ACL system before creating policies or issuing tokens.
For more details, see the Consul ACL documentation.
By the end of this module, you will be able to:
  • Enable and bootstrap the Consul ACL system
  • Author and attach ACL policies
  • Manage token lifecycles, including automatic revocation
  • Execute authenticated operations via CLI, API, and UI
Let’s dive in and secure your Consul cluster step by step.

Watch Video