  rules:
  - from:
    - source:
        principals:
        - cluster.local/ns/default/sa/bookinfo-gateway-istio
EOF</code></pre><p>If you open the Bookinfo application in your browser (<code>http://localhost:8080/productpage</code>), you will see the product page, just as before. However, if you try to access the <code>productpage</code> service from a different service account, you should see an error.</p><p>Let&rsquo;s try accessing Bookinfo application from a different client in the cluster:</p><pre><c