Using Consul Intentions to Enforce Least-Privilege Service Access in Connect
Consul Connect sidecars allow all inbound traffic by default. Intentions provide a declarative allow/deny layer enforced by the proxy, enabling least-privilege service-to-service access without code changes.