 a workload at the same time, the deny policies are
evaluated first. The evaluation is determined by the following rules:</p><ol><li>If there are any DENY policies that match the request, deny the request.</li><li>If there are no ALLOW policies for the workload, allow the request.</li><li>If any of the ALLOW policies match the request, allow the request.</li><li>Deny the request.</li></ol><p>Istio Authorization Policy also supports the AUDIT action to decide whether to log requests.
AUDIT policies do not af