The Kyverno Authz Server provides programmable and flexible, policy-based authorization for Envoy proxies and HTTP services.