thod at paths of prefix &ldquo;/info&rdquo; or,</li><li>&ldquo;POST&rdquo; method at path &ldquo;/data&rdquo;.</li></ul><p>when the request has a valid JWT token issued by &ldquo;https://accounts.google.com&rdquo;.</p><p>Any other requests will be denied.</p><pre><code class=language-yaml>apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin
  namespace: foo
spec:
  action: ALLOW
  rules:
  - from:
    - source:
        principals: [&quot;cluster.local/ns/default/sa/sleep