quot;/data&quot;]
   when:
   - key: request.auth.claims[iss]
     values: [&quot;https://accounts.google.com&quot;]
</code></pre><p>Access control is enabled on a workload if there is any authorization policies selecting
the workload. When access control is enabled, the default behavior is deny (deny-by-default)
which means requests to the workload will be rejected if the request is not allowed by any of
the authorization policies selecting the workload.</p><p>Currently AuthorizationPolicy only supports &l