{
  "_comment": "OPTIONAL. With no file at all, envs are auto-derived from ~/.aws/config (profiles) + your kube contexts, paired by AWS account id. Add this file ONLY to: (1) arm the prod guard via prodAccounts, (2) cover envs the derive can't see (a context with no matching profile, or a non-ARN context), or (3) add friendlier aliases. Stays local; never commit real account ids.",
  "prodAccounts": ["111111111111"],
  "envs": {
    "stage": { "context": "arn:aws:eks:eu-central-1:222222222222:cluster/stage" }
  }
}