Authorization

The OPA server that runs as a part of the Envoy System has its APIs protected by Basic Authorization.

The system.authz policy in the system's bundle controls which Open Policy Agent APIs are accessible. You can view and modify this policy through the Styra DAS UI under system/authz/authz.rego.