 control access to and from a service based on the client workload
identities that are automatically issued to all workloads in the mesh.</p><h2 id=enforce-layer-4-authorization-policy>Enforce Layer 4 authorization policy</h2><p>Let&rsquo;s create an <a href=/v1.24/docs/reference/config/security/authorization-policy/>authorization policy</a> that restricts which services can communicate with the <code>productpage</code> service. The policy is applied to pods with the <code>app: productpage</code> label, and