  - services: [&#34;bookstore.default.svc.cluster.local&#34;]
    paths: [&#34;/books/*”]
    methods: [&#34;GET”]
</code></pre><h4 id=using-authenticated-client-identities>Using authenticated client identities</h4><p>Suppose you want to grant this <code>book-reader</code> role to your <code>bookstore-frontend</code> service. If you have enabled
<a href=/v1.21/docs/concepts/security/#mutual-tls-authentication>mutual TLS authentication</a> for your mesh, you can use a
service account to identify your <co