IT&rdquo;. It will audit any GET requests to the path with the
prefix &ldquo;/user/profile&rdquo;.</p><pre><code class=language-yaml>apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  namespace: ns1
  name: anyname
spec:
  selector:
    matchLabels:
      app: myapi
  action: audit
  rules:
  - to:
    - operation:
        methods: [&quot;GET&quot;]
        paths: [&quot;/user/profile/*&quot;]
</code></pre><p>Authorization Policy scope (target) is determined by &ldquo;metadata/names