34;&#34;
    name: productpage
  action: ALLOW
  rules:
  - from:
    - source:
        principals:
        - cluster.local/ns/default/sa/curl
    to:
    - operation:
        methods: [&#34;GET&#34;]
EOF</code></pre><p>Note the <code>targetRefs</code> field is used to specify the target service for the authorization policy of a waypoint proxy. The rules section is similar as before, but this time you added the <code>to</code> section to specify the operation that is allowed.</p><div><aside class="callout t