 typically corresponds to a Kubernetes deployment,
while a <a href="/docs/reference/glossary/#workload-instance">workload instance</a> corresponds to an individual <a href="/docs/reference/glossary/#pod">pod</a> managed
by the deployment.</p>'>workloads</span>
in your mesh. This task shows you how to set up access control using Istio authorization.
First, you configure a simple <code>deny-all</code> policy that rejects all requests to the workload,
and then grant more access to the workload gradually and in