Vault supports which type of configuration for source limited token?

"Cloud-bound tokens" is not a standard Vault token binding type; Vault might integrate with cloud identity, but tokens aren't bound to generic "clouds."

"Domain-bound tokens" is not a standard Vault token binding type; while policies might restrict access based on attributes, a direct domain binding for tokens is not a feature.

Vault tokens can be configured with a `cidr_list` parameter, which restricts their usage to clients originating from specific IP CIDR blocks. This feature is known as CIDR-bound tokens, enhancing security by limiting the network locations from which a token can be used.

While Vault can issue certificates (e.g., via PKI engine) and authentication methods can use certificates, the term "certificate-bound tokens" as a direct token configuration for source limiting is not a standard feature like `cidr_list`.