{
  "connections": [
    {
      "connection": "internal_api",
      "tls_version_source": "RFC9846",
      "client_identity": "spiffe://prod.example/workload/orders-api",
      "client_trust_domain": "prod.example",
      "action": "orders.read"
    },
    {
      "connection": "admin_endpoint",
      "tls_version_source": "RFC9846",
      "client_identity": "spiffe://prod.example/workload/admin-console",
      "client_trust_domain": "prod.example",
      "action": "admin.read"
    }
  ]
}