{
  "resources": {
    "Environment": {
      "grants": {
        "readConfig": {
          "arnFormat": "${environmentArn}/configuration/*",
          "actions": [
            "appconfig:GetLatestConfiguration",
            "appconfig:StartConfigurationSession"
          ]
        }
      }
    }
  }
}