the <a href="#service-mesh">service mesh</a>. Unlike the <a href="#service-name">service name</a> and the [workload principal], the workload name is not a strongly verified property and should not be used when enforcing ACLs. The workload names is accessible in Istio configuration as the <code class="highlighter-rouge">source.name</code> and <code class="highlighter-rouge">destination.name</code> <a href="#attribute">attributes</a>.</p></dd><dt id="workload-principal">Workload Principal</dt><dd role="defini