=true data-repo=istio>apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: require-mtls
  namespace: foo
spec:
  action: DENY
  rules:
  - from:
    - source:
        notPrincipals: [&#34;*&#34;]
</code></pre><h2 id=require-mandatory-authorization-check-with-deny-policy>Require mandatory authorization check with <code>DENY</code> policy</h2><p>You can use the <code>DENY</code> policy if you want to require mandatory authorization check that must be satisfied and cannot be
bypass