[API-KEYS] Limit access of application keys with rules

Hi everybody,

I was looking for all application keys I have created many on ovh and now try to limit the rights of each application key to it job.
I wonder whether you have some best practise to limit the accessRules of an application key when I generate the consummer key like that:

curl -XPOST -H “X-Ovh-Application: ” -H “Content-type: application/json” https://eu.api.ovh.com/1.0/auth/credential -d ‘{
“accessRules”:[
{“method”:”POST”,”path”:”/domain/zone//record”},
{“method”:”POST”,”path”:”/domain/zone//refresh”},
{“method”:”DELETE”,”path”:”/domain/zone//record/*”}
],
“redirection”: “https://www."
}’

First example, I have one dns zone with multi domain and I would rather limit the POST on each domain with a specific application key. Could I limit the access Rules to do this ?

Second example, I'm using terraform with OVH and have an application key with all access on /
I didn't find which api routes terraform needed to create new instance of server and I'am afraid of block terraform if I limit too much its rights. Do you have any topic on this too ?

Thanks you

JCG