m"]</code><br>&mdash;<br><code>key: request.auth.claims[nested1][nested2]</code><br><code>values: ["some-value"]</code></td></tr><tr><td><code>destination.ip</code></td><td>Destination workload instance IP address, supports single IP or CIDR</td><td>HTTP and TCP</td><td><code>key: destination.ip</code><br><code>values: ["10.1.2.3", "10.2.0.0/16"]</code></td></tr><tr><td><code>destination.port</code></td><td>Destination workload instance port, must be in the range [0, 65535]. Note this is not the service por