&quot;]
    - source:
        namespaces: [&quot;test&quot;]
    to:
    - operation:
        methods: [&quot;GET&quot;]
        paths: [&quot;/info*&quot;]
    - operation:
        methods: [&quot;POST&quot;]
        paths: [&quot;/data&quot;]
    when:
    - key: request.auth.claims[iss]
      values: [&quot;https://accounts.google.com&quot;]
</code></pre><p>The following is another example that sets <code>action</code> to &ldquo;DENY&rdquo; to create a deny policy.
It denies requests from the &ldquo;dev&